Advertisements

Monday, 31 December 2018

EU to offer bug bounties from January 2019 to find security flaws in open source tools

The European Union announced that it would launch bug bounty program in 2019 January that will offer prizes for spotting security flaws in 14 free, open source software tools EU institutions use. These include well-known tools like  VLC Media Player, KeePass, 7-zip and Drupal, GNU C Library, Apache Tomcat, PuTTY and more. The bounties range from €25,000 to €90,000 ($28,600 to $102,900) and will start expiring August 15th, 2019; a few will last until 2020. The European Union started checking the open source software in earnest in 2015, which is when it launched the Free and Open Source Software Audit (FOSSA). It then extended the project by three more years in 2017, when it first planned to offer bug bounties as a measure to increase the security of Free and Open Source Software. While there is no guarantee for complete security from cyber attacks, but bounties always ensure patching vulnerabilities that might otherwise go undiscovered. Source