FROM FINDING TO FIXING: REDUCING MAINTAINER BURDEN WITH AUTOMATED PATCHES

Summary from the TLDR InfoSec newsletter

Google now pairs OSS-Fuzz with CodeMender, DeepMind's AI code security agent, so the pipeline moves beyond reporting crashes to performing root-cause analysis and generating validated patches for C/C++ memory safety bugs. Each patch is tested in isolation to confirm it compiles, fixes the crash, and avoids regressions, with Google engineers manually reviewing submissions during this beta phase, and projects that restrict AI-generated code are automatically excluded. Enrolled OSS-Fuzz projects receive these patches by default and can opt out through their existing configuration.