On curl bug bounties on hackerone

Hello friends!

We're still two weeks away from the pending next release and we're merging
bug-fixes daily.

As part of this upcoming release, we will announce at least two new security
vulnerabilities. The security researchers who reported these problems to us
will be rewarded money according to our bug bounty program.

In the curl security team we've set out to raise the reward amounts and we aim
to do this gradually going forward. These two new rewards will be the highest
amounts paid out yet.

We can do this raising of the amounts because of two reasons:

  1 - we're getting a good flow of donations that funds this effort - thanks to
      everyone who donates money to us, we're improving curl with the money!

  2 - we're working hard on pro-active measurements in the project to make us
      less likely to introduce new security flaws.

Finally: if *you* know of or just suspect a security problem in curl, please
report it at https://hackerone.com/curl

-- 
  / daniel.haxx.se | Commercial curl support up to 24x7 is available!
                   | Private help, bug fixes, support, ports, new features
                   | https://www.wolfssl.com/contact/
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:   https://curl.haxx.se/mail/etiquette.html