Software bugs

The Register reports:

The quality of open source code has improved over the last two years, according to an audit sponsored by the US Department of Homeland Security.

The security and quality of more than 250 open source projects – including Apache, Linux, Firefox and PHP – was assessed using code analysis tools from Coverity as part of the federal government’s Open Source Hardening Project. Coverity set up a scan site that invited individual developers to put their code through its paces with its static source code analysis tool, Coverity Prevent.

Popularity: 40% [?]

Ubuntu is having a bug jam between 8th and 10th August 2008. As The Fridge says:

So, what is the Ubuntu Global Bug Jam? Put simply, it is a world-wide online and face-to-face event to get people together to fix Ubuntu bugs – we want to get as many people online fixing bugs, having a great time doing so, and putting their brick in the wall for free software. This is not only a great opportunity to really help Ubuntu, but to also get together with other Ubuntu fans to make a difference together, either via your LoCo team, your LUG, other free software group, or just getting people together in your house/apartment to fix bugs and have a great time.

Popularity: 54% [?]

The Bug Blog links to a different bug every day.

Popularity: 57% [?]

The Open Source Vulnerability Database is an independent vulnerability database created by the security community. It is available to individuals and corporations without charge.

They are currently looking for security professionals to help maintain the database.

(Found through Raven.)

Popularity: 83% [?]

After looking at the source of several Debian packages and discovering a lack of concern for security, Steve Kemp began the unofficial Debian GNU/Linux Security Audit Project, reviewing Debian packages for security holes, starting with programs that run with root privileges or that have network access.

(Via advogato.)

Popularity: 33% [?]

A DARPA funded project to encourage a community of auditors to review kernel source code for security related holes has failed due to lack of interest according to SecurityFocus. (Via slashdot.)

Popularity: 29% [?]