The Linux Foundation recently announced the provision of CII funding to OpenSSL, OpenSSH, and NTP for security auditing of OpenSSL code. This is the first time that the Linux Foundation has provided support for OpenSSL since the vulnerability & ldquo; Hard Work & rdquo. It is understood that Linux has created a core infrastructure plan (CII) for the maintenance of the OpenSSL core code library to improve the security level of open-source projects such as OpenSSL. This time the funds will be used as the core code
The Linux Foundation recently announced the provision of CII funding to OpenSSL, OpenSSH, and NTP for security auditing of OpenSSL code. This is the first time that the Linux Foundation has provided support for OpenSSL since the "painstaking efforts" vulnerability.
It is understood that Linux has created a core infrastructure plan (CII) for the maintenance of the OpenSSL core code library to improve the security level of open-source projects such as OpenSSL. The funds will be used to maintain the core code library and the salaries of two full-time programmers.
Open-source security
OpenSSL encryption software is widely used in the global technology industry, but it has been in a shortage of funds. The emergence of "painstaking efforts" vulnerabilities has also raised people's vigilance. The Linux Foundation is also setting up CII. At the same time, Huawei, Adobe, Bloomberg, HP, and Salesforce.com have become new members of CII.
Of course, this is only the beginning. the Linux Foundation said it will invest special security funds in more open-source projects to maintain the operation of these important but fragile open-source projects.