Backport security fixes to older software with Codex
Artem Dinaburg at the security firm Trail of Bits uses Codex to move security fixes to older, stable versions of Linux, Ubuntu and Fedora. The agents find missing fixes, adapt the code, run tests and prepare the submission packet.
Done with CodexModerate
What was done
Artem Dinaburg at the security firm Trail of Bits uses Codex to move security fixes to older, stable versions of Linux, Ubuntu and Fedora. The agents find missing fixes, adapt the code, run tests and prepare the submission packet. Engineers review everything before submission. By 29 October the project had delivered fixes for 149 known vulnerabilities. A simple backport takes about 30 minutes of human attention, but testing and maintainer approval come on top.
How to do it
- Paste the prompt into the tool, and replace the text in brackets with your own.
- Read the answer through. Do not send, delete or publish anything until you have seen it yourself.
- Check the original before you trust a figure, a name or a date.
Try it with Codex
Find security fixes in [project] that exist in the latest version but are missing from [older version]. Make a list with the vulnerability, the commit and how hard the backport looks. Pick one simple fix, adapt it to the older code and run the tests. Do not send anything to the maintainers. Show me the diff and test results before anything changes in the branch. You are done when I have the list and one finished fix to review.
Replace text in brackets with your own.
Done when. You have the list and one finished fix to review.
Trail of Bits ·