The European Union will help cover expenses of bug bounty programs for 14 open-source projects according to an announcement made by EU Member of Parliament Julia Reda.The projects that will receive funding for their bug bounty programs are 7-zip, Apache Kafka, Apache Tomcat, Digital Signature Services (DSS), Drupal, Filezilla, FLUX TL, GNU C Library (glibc), KeePass, midPoint, Notepad++, PuTTY, Symfony PHP framework, VLC Media Player and WSO2.The bug bounty programs are being sponsored as part of third edition of Free and Open Source Software Audit (FOSSA) project.FOSSA was first approved by EU authorities back in 2015 when security researchers discovered severe vulnerabilities in OpenSSL library a year earlier.Third edition of FOSSAIn her announcement, Julia Reda highlighted importance of free and open-source software, saying:"The issue made lots of people realise how important Free and Open Source Software is for integrity and reliability of Internet and other infrastructure.

Like many other organisations, institutions like European Parliament, Council and Commission build upon Free Software to run their websites and many other things."The first edition of FOSSA ran between 2015 and 2016 with a budget of €1m and a public survey was held which decided that Apache HTTP web server and KeePass password manager would receive a sponsored security audit.FOSSA 2 had a budget of €2m but its bug bounty program was limited to €60,000 for VLC Media Player app.Beginning in January, security researchers and companies can hunt for vulnerabilities in 14 open source projects chosen for FOSSA 3 and report them to earn a monetary award.Via ZDNet