Fixes and hardening changes of ours that are in production in the Linux kernel,
GNU GRUB and other projects, plus changes made by others that credit or cite our work.
Every entry links to the commit in the upstream tree.
| Linux kernel |
|---|
| 4e7c22d447bb | 2015-02-14 | x86, mm/ASLR: Fix stack randomization on 64-bit systems | Author |
| 4e26d11f5268 | 2015-03-27 | x86/mm: Improve AMD Bulldozer ASLR workaround | Author |
| 8b8addf891de | 2016-03-10 | x86/mm/32: Enable full randomization on i386 and X86_32 | Author |
| d1fd836dcf00 | 2015-04-14 | mm: split ET_DYN ASLR from mmap ASLR (the Offset2lib fix; arm, arm64, mips, powerpc and x86) | Reported-by |
| ba093a6d9397 | 2016-08-02 | mm: refuse wrapped vm_brk requests | Reported-by |
| 0036d1f7eb95 | 2016-08-02 | binfmt_elf: fix calculations for bss padding | Reported-by |
| 9fccc5c0c99f | 2020-03-26 | x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit | Suggested-by |
| 6e0d6ac5f3d9 | 2020-03-26 | arm64/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit | Suggested-by |
| 122306117afe | 2020-03-26 | x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK | Suggested-by |
| eaf3f9e618ce | 2020-03-26 | arm32/64/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK | Suggested-by |
| GNU GRUB |
|---|
| 451d80e52d85 | 2015-12-16 | Fix security issue when reading username and password (CVE-2015-8370) | Author |
| glibc |
|---|
| 035c012e32c1 | 2021-02-25 | Reduce the statically linked startup code [BZ #23323] — the commit message cites return-to-csu. Shipped in glibc 2.34 (August 2021) | Cites our work |
| sniffit |
|---|
| CREDITS | 2016-11-13 | Fix for CVE-2014-5439 (root shell); the project CREDITS file states the fix was written by us | Author of the fix |
| cryptsetup (Debian) |
|---|
| 3f99b35c9461 | 2016-11-15 | Fix for CVE-2016-4484 (Abusing LUKS to Hack the System), credited in the changelog | Reported-by |
| 87094a73b1ff | 2016-12-06 | «Also credit Hector Marco for CVE-2016-4484» | Credit |
