From de09497fb3fca4efb6bafd43f82420a5fa945243 Mon Sep 17 00:00:00 2001 From: "russell@unturf.com" Date: Fri, 3 Apr 2026 15:58:23 -0400 Subject: [PATCH] undf: assign UNDF-2026-000001224..000001229 (systemd-0004, dbus-0001, mysql-0005, proxysql-0002 +2); stamp patches --- UNDF-REGISTRY.json | 11 ++++++++++- .../patch/dbus-0001-policy-optimize-o-n2.patch | 1 + defects/dbus/patch/SCAN.md | 1 + .../patch/mysql-0005-row0sel-template-col-hashmap.md | 1 + .../mysql-0005-row0sel-template-col-hashmap.patch | 1 + .../patch/openfoam-0003-dsmc-typeId-lookup.patch | 1 + .../patch/proxysql-0002-fts-indexed-cols-hashset.md | 1 + .../proxysql-0002-fts-indexed-cols-hashset.patch | 1 + .../patch/root-cern-0003-ttree-seqbranches-find.patch | 1 + defects/systemd-0004/patch/SCAN.md | 1 + .../patch/systemd-0004-seccomp-strv-to-set.patch | 1 + ...-0004-wav2vec2-esm-all-special-ids-loop-scan.patch | 1 + 12 files changed, 21 insertions(+), 1 deletion(-) diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json index 6936238a2..bdad81869 100644 --- a/UNDF-REGISTRY.json +++ b/UNDF-REGISTRY.json @@ -1218,5 +1218,14 @@ "krita-0002-0002": "UNDF-2026-000001217", "jicofo-0001-0001": "UNDF-2026-000001218", "jicofo-0002-0002": "UNDF-2026-000001219", - "langchain-0002-0002": "UNDF-2026-000001220" + "langchain-0002-0002": "UNDF-2026-000001220", + "openfoam-0003-0003": "UNDF-2026-000001221", + "root-cern-0003-0003": "UNDF-2026-000001222", + "transformers-0004-0004": "UNDF-2026-000001223", + "dbus-0001": "UNDF-2026-000001224", + "dbus-0001-0001": "UNDF-2026-000001225", + "mysql-0005": "UNDF-2026-000001226", + "proxysql-0002": "UNDF-2026-000001227", + "systemd-0004-0001": "UNDF-2026-000001228", + "systemd-0004-0004": "UNDF-2026-000001229" } diff --git a/defects/dbus-0001/patch/dbus-0001-policy-optimize-o-n2.patch b/defects/dbus-0001/patch/dbus-0001-policy-optimize-o-n2.patch index bbdfcdd62..edbfc0c01 100644 --- a/defects/dbus-0001/patch/dbus-0001-policy-optimize-o-n2.patch +++ b/defects/dbus-0001/patch/dbus-0001-policy-optimize-o-n2.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001225 # UNDF: UNDF-PENDING --- a/bus/policy.c +++ b/bus/policy.c diff --git a/defects/dbus/patch/SCAN.md b/defects/dbus/patch/SCAN.md index d56e6c304..ae47c581a 100644 --- a/defects/dbus/patch/SCAN.md +++ b/defects/dbus/patch/SCAN.md @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001224 # dbus 5-MOAD scan — 2026-04-03 Source: https://gitlab.freedesktop.org/dbus/dbus (depth=1) diff --git a/defects/mysql/patch/mysql-0005-row0sel-template-col-hashmap.md b/defects/mysql/patch/mysql-0005-row0sel-template-col-hashmap.md index be1983606..24f9a1347 100644 --- a/defects/mysql/patch/mysql-0005-row0sel-template-col-hashmap.md +++ b/defects/mysql/patch/mysql-0005-row0sel-template-col-hashmap.md @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001226 # mysql-0005 — `row_sel_store_mysql_rec`: O(T×C) std::find per row on secondary index scan ## Status diff --git a/defects/mysql/patch/mysql-0005-row0sel-template-col-hashmap.patch b/defects/mysql/patch/mysql-0005-row0sel-template-col-hashmap.patch index 849672938..d39f81fab 100644 --- a/defects/mysql/patch/mysql-0005-row0sel-template-col-hashmap.patch +++ b/defects/mysql/patch/mysql-0005-row0sel-template-col-hashmap.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001226 # UNDF: (leave blank) # CWE-407: Algorithmic Complexity — row0sel template_col O(T*C) std::find per row # Severity: HIGH (hot query execution path — every secondary index covering scan) diff --git a/defects/openfoam-0003/patch/openfoam-0003-dsmc-typeId-lookup.patch b/defects/openfoam-0003/patch/openfoam-0003-dsmc-typeId-lookup.patch index 7a375fad3..75c9629b6 100644 --- a/defects/openfoam-0003/patch/openfoam-0003-dsmc-typeId-lookup.patch +++ b/defects/openfoam-0003/patch/openfoam-0003-dsmc-typeId-lookup.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001221 --- a/src/lagrangian/DSMC/clouds/Templates/DSMCCloud/DSMCCloud.C +++ b/src/lagrangian/DSMC/clouds/Templates/DSMCCloud/DSMCCloud.C @@ -98,6 +98,16 @@ void Foam::DSMCCloud::initialise diff --git a/defects/proxysql/patch/proxysql-0002-fts-indexed-cols-hashset.md b/defects/proxysql/patch/proxysql-0002-fts-indexed-cols-hashset.md index 6ccd9e4b8..34582b23b 100644 --- a/defects/proxysql/patch/proxysql-0002-fts-indexed-cols-hashset.md +++ b/defects/proxysql/patch/proxysql-0002-fts-indexed-cols-hashset.md @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001227 # proxysql-0002 — `MySQL_FTS`: O(R×C×I) std::find on indexed_cols per row during FTS indexing ## Status diff --git a/defects/proxysql/patch/proxysql-0002-fts-indexed-cols-hashset.patch b/defects/proxysql/patch/proxysql-0002-fts-indexed-cols-hashset.patch index d2bdeea8c..a31c03206 100644 --- a/defects/proxysql/patch/proxysql-0002-fts-indexed-cols-hashset.patch +++ b/defects/proxysql/patch/proxysql-0002-fts-indexed-cols-hashset.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001227 # UNDF: (leave blank) # CWE-407: Algorithmic Complexity — MySQL_FTS indexed_cols O(R*C*I) linear scan # Severity: MEDIUM (FTS indexing path — per-row per-column membership check) diff --git a/defects/root-cern-0003/patch/root-cern-0003-ttree-seqbranches-find.patch b/defects/root-cern-0003/patch/root-cern-0003-ttree-seqbranches-find.patch index 4aaf3dc13..24a6356e6 100644 --- a/defects/root-cern-0003/patch/root-cern-0003-ttree-seqbranches-find.patch +++ b/defects/root-cern-0003/patch/root-cern-0003-ttree-seqbranches-find.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001222 --- a/tree/tree/src/TTree.cxx +++ b/tree/tree/src/TTree.cxx @@ -5862,6 +5862,12 @@ void TTree::InitializeBranchLists(bool checkLeafCount) diff --git a/defects/systemd-0004/patch/SCAN.md b/defects/systemd-0004/patch/SCAN.md index 9aa01d57a..04b67056a 100644 --- a/defects/systemd-0004/patch/SCAN.md +++ b/defects/systemd-0004/patch/SCAN.md @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001228 # systemd deeper scan — 2026-04-03 Source: https://github.com/systemd/systemd (depth=1) diff --git a/defects/systemd-0004/patch/systemd-0004-seccomp-strv-to-set.patch b/defects/systemd-0004/patch/systemd-0004-seccomp-strv-to-set.patch index f317e595f..3d26a8cfd 100644 --- a/defects/systemd-0004/patch/systemd-0004-seccomp-strv-to-set.patch +++ b/defects/systemd-0004/patch/systemd-0004-seccomp-strv-to-set.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001229 # UNDF: UNDF-PENDING --- a/src/shared/seccomp-util.c +++ b/src/shared/seccomp-util.c diff --git a/defects/transformers-0004/patch/transformers-0004-wav2vec2-esm-all-special-ids-loop-scan.patch b/defects/transformers-0004/patch/transformers-0004-wav2vec2-esm-all-special-ids-loop-scan.patch index b663baa20..f87cb83f9 100644 --- a/defects/transformers-0004/patch/transformers-0004-wav2vec2-esm-all-special-ids-loop-scan.patch +++ b/defects/transformers-0004/patch/transformers-0004-wav2vec2-esm-all-special-ids-loop-scan.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000001223 # transformers-0004: wav2vec2, wav2vec2_phoneme, esm all_special_ids/tokens property rebuilt per loop iteration # CWE-407 - Algorithmic Complexity # MOAD-0001 - The Sedimentary Defect