From 558f0d30c2b34ee5d89756e76e1e36320c46ff2c Mon Sep 17 00:00:00 2001 From: "russell@unturf.com" Date: Mon, 30 Mar 2026 14:43:28 -0400 Subject: [PATCH] undf: stamp clementine patches (UNDF-2026-000000841..842) --- UNDF-REGISTRY.json | 4 +++- .../patch/clementine-0001-librarywatcher-scan-quadratic.patch | 1 + .../patch/clementine-0002-songsender-indexof-quadratic.patch | 1 + 3 files changed, 5 insertions(+), 1 deletion(-) diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json index e98585e14..e52b97aec 100644 --- a/UNDF-REGISTRY.json +++ b/UNDF-REGISTRY.json @@ -838,5 +838,7 @@ "kdenlive-0007": "UNDF-2026-000000837", "kdenlive-0008": "UNDF-2026-000000838", "strawberry-0001": "UNDF-2026-000000839", - "strawberry-0002": "UNDF-2026-000000840" + "strawberry-0002": "UNDF-2026-000000840", + "clementine-0001": "UNDF-2026-000000841", + "clementine-0002": "UNDF-2026-000000842" } diff --git a/defects/clementine/patch/clementine-0001-librarywatcher-scan-quadratic.patch b/defects/clementine/patch/clementine-0001-librarywatcher-scan-quadratic.patch index 2399937b7..324ca9574 100644 --- a/defects/clementine/patch/clementine-0001-librarywatcher-scan-quadratic.patch +++ b/defects/clementine/patch/clementine-0001-librarywatcher-scan-quadratic.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000841 # UNDF: (leave blank) # CWE-407: LibraryWatcher::ScanSubdirectory O(F*S) FindSongByPath + files_on_disk.contains # Severity: HIGH diff --git a/defects/clementine/patch/clementine-0002-songsender-indexof-quadratic.patch b/defects/clementine/patch/clementine-0002-songsender-indexof-quadratic.patch index b03179d18..3a2c0def7 100644 --- a/defects/clementine/patch/clementine-0002-songsender-indexof-quadratic.patch +++ b/defects/clementine/patch/clementine-0002-songsender-indexof-quadratic.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000842 # UNDF: (leave blank) # CWE-407: SongSender indexOf/contains O(N^2) in SendAlbum/SendPlaylist/SendUrls # Severity: MEDIUM