engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
607 commits 2 branches 0 tags 239 MiB
Commit graph

4 commits

Author SHA1 Message Date
russell@unturf.com
409d0f1907 imagemagick+ffmpeg: 5-MOAD scan; ffmpeg-0004 CWE-312 Authorization header logged at AV_LOG_DEBUG 
ffmpeg-0004 (MOAD-0004 / CWE-312): libavformat/http.c http_connect() logs the full
HTTP request at AV_LOG_DEBUG, including the Authorization: Basic header with
base64-encoded user:pass. Fix: produce a sanitized copy before av_log, replacing
auth header values with ***REDACTED***. Wire bytes unchanged. 22/22 unit tests PASS.

FFmpeg MOADs 0002/0003/0005: CLEAN. ImageMagick MOADs 0002-0005: CLEAN.
 2026-03-31 21:10:24 -04:00
russell@unturf.com
7e717432dd undf: assign UNDF-2026-000000874; stamp vllm-0001 patch 2026-03-30 16:42:12 -04:00
russell@unturf.com
b5c2a3d989 undf: stamp patches, update registry to 792 2026-03-30 11:15:59 -04:00
russell@unturf.com
9b71d0d527 undf: assign 778-785; stamp inkscape/blender patches 2026-03-30 11:13:27 -04:00