"Google on Tuesday detailed plans for oCERT, a volunteer workforce that will remediate security issues in open source applications.

ocert.pngThe move makes a ton of sense. Community driven software can have bugs and plenty of folks to find these vulnerabilities. The problem: There’s no central group to actually fix these flaws.
...."

More at
http://blogs.zdnet.com/security/?p=1076

pointing to Google Online Security Bog post
http://googleonlinesecurity.blogspot.com/2008/05/contributing-to-open-source-software.html