...
| Page Properties | ||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Updates
- Using Alexy's scanner 6421 packages out of >22000 packages with RISC-V binaries, DSOs and relocatable .o files are potentially vulnerable to stack clash attacks
- A gcc-14.1.1 with Raphael's stack clash mitigations is building so that we can start testing how many of those 6421 vulnerabilities are fixed.
- Using Alexy's scanner we're able to start scanning packages for issues. Those issues which show potential problems can then be rebuilt with Raphael's work to verify the vulnerability has been closed.
- ~22000 packages with binary data need scanning (out of > 65000 total packages)
- Roughly 1/3rd of the packages are being flagged by Alexy's scanner.
...