[$] Additional hardening for the glibc dynamic linker
The Node.js project recently had a security vulnerability that affected its Brotli decoder. The bug was a buffer overflow , but the particular way that official Node.js binaries are built for Linux meant that one of the main protections against turning a buffer overflow into remote code execution, address space layout randomization (ASLR) could not be turned on. If ASLR had been enabled, the bug…
We haven't written up this one. LWN has the full story — the link below goes straight to it.
