engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
java-topology/defects/imagemagick/patch
History
russell@unturf.com 409d0f1907 imagemagick+ffmpeg: 5-MOAD scan; ffmpeg-0004 CWE-312 Authorization header logged at AV_LOG_DEBUG 
ffmpeg-0004 (MOAD-0004 / CWE-312): libavformat/http.c http_connect() logs the full
HTTP request at AV_LOG_DEBUG, including the Authorization: Basic header with
base64-encoded user:pass. Fix: produce a sanitized copy before av_log, replacing
auth header values with ***REDACTED***. Wire bytes unchanged. 22/22 unit tests PASS.

FFmpeg MOADs 0002/0003/0005: CLEAN. ImageMagick MOADs 0002-0005: CLEAN.
2026-03-31 21:10:24 -04:00
..
imagemagick-0001-uhdr-getimagelist-length-loop.patch undf: assign 778-785; stamp inkscape/blender patches 2026-03-30 11:13:27 -04:00
imagemagick-0002-syncimglist-scene-dedup-quadratic.patch undf: assign 778-785; stamp inkscape/blender patches 2026-03-30 11:13:27 -04:00
imagemagick-moad-0002-0005-CLEAN.md imagemagick+ffmpeg: 5-MOAD scan; ffmpeg-0004 CWE-312 Authorization header logged at AV_LOG_DEBUG 2026-03-31 21:10:24 -04:00