russell@unturf.com fb090af082 vlc+kodi: 5-MOAD scan; vlc-0003 CWE-312 SMB credentials logged verbatim ... vlc-0003: modules/access/dsm/access.c:585 logs psz_login + psz_domain via msg_Warn() on every successful SMB1 login. VLC debug logs are routinely shared in bug reports, exposing SMB usernames and domain names. Fix: remove our credential log line. 6/6 unit tests PASS. VLC MOADs 0002/0003/0005 CLEAN. Kodi all 5 MOADs CLEAN (CWE-407 previously noted; CServiceBroker + LanguageHookTls documented as architectural debt, no patch warranted).		2026-03-31 21:10:43 -04:00
..
patch	undf: assign 806; stamp vlc+obs-studio patches	2026-03-30 11:33:21 -04:00
unit	undf: assign UNDF-2026-000000874; stamp vllm-0001 patch	2026-03-30 16:42:12 -04:00
SCAN.md	vlc+kodi: 5-MOAD scan; vlc-0003 CWE-312 SMB credentials logged verbatim	2026-03-31 21:10:43 -04:00