一个月前Google为了回报开源社区,提高第三方开源项目和整个互联网的安全性,发布了开源项目的补丁奖励计划.对重要的开源项目提交安全补丁,可以从Goole这里或得$500到$3133.7不等的现金奖励。
昨日谷歌再次扩大了奖励的开源项目范围.目前包括如下项目:
Core infrastructure network services: OpenSSH, BIND, ISC DHCP
Core infrastructure image parsers: libjpeg, libjpeg-turbo, libpng, giflib
Open-source foundations of Google Chrome: Chromium, Blink
Other high-impact libraries: OpenSSL, zlib
Security-critical, commonly used components of the Linux kernel (including KVM)
All the open-source components of Android: Android Open Source Project
Widely used web servers: Apache httpd, lighttpd, nginx
Popular mail delivery services: Sendmail, Postfix, Exim, Dovecot
Virtual private networking: OpenVPN
Network time: University of Delaware NTPD
Additional core libraries: Mozilla NSS, libxml2
Toolchain security improvements for GCC, binutils, and llvm
更多信息参考Google patch rewards
|