diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json index e98585e14..e52b97aec 100644 --- a/UNDF-REGISTRY.json +++ b/UNDF-REGISTRY.json @@ -838,5 +838,7 @@ "kdenlive-0007": "UNDF-2026-000000837", "kdenlive-0008": "UNDF-2026-000000838", "strawberry-0001": "UNDF-2026-000000839", - "strawberry-0002": "UNDF-2026-000000840" + "strawberry-0002": "UNDF-2026-000000840", + "clementine-0001": "UNDF-2026-000000841", + "clementine-0002": "UNDF-2026-000000842" } diff --git a/defects/clementine/patch/clementine-0001-librarywatcher-scan-quadratic.patch b/defects/clementine/patch/clementine-0001-librarywatcher-scan-quadratic.patch index 2399937b7..324ca9574 100644 --- a/defects/clementine/patch/clementine-0001-librarywatcher-scan-quadratic.patch +++ b/defects/clementine/patch/clementine-0001-librarywatcher-scan-quadratic.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000841 # UNDF: (leave blank) # CWE-407: LibraryWatcher::ScanSubdirectory O(F*S) FindSongByPath + files_on_disk.contains # Severity: HIGH diff --git a/defects/clementine/patch/clementine-0002-songsender-indexof-quadratic.patch b/defects/clementine/patch/clementine-0002-songsender-indexof-quadratic.patch index b03179d18..3a2c0def7 100644 --- a/defects/clementine/patch/clementine-0002-songsender-indexof-quadratic.patch +++ b/defects/clementine/patch/clementine-0002-songsender-indexof-quadratic.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000842 # UNDF: (leave blank) # CWE-407: SongSender indexOf/contains O(N^2) in SendAlbum/SendPlaylist/SendUrls # Severity: MEDIUM