Enhancing OSS Remediation with Patch Backporting

Nowadays existing vulnerability remediation methods mainly rely on version upgrades which often struggle to eliminate all vulnerabilities in complex scenarios. Therefore, this paper proposes a patch-porting-based tool aiming to automate the porting of patches to vulnerable versions, achieving remediation beyond traditional upgrading. The experiment indicates that 85% of the vulnerabilities successfully generated patches for 20 CVEs, and 70% passed validation, demonstrating that PPR can serve as a supplement to existing vulnerability remediation tools.