engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
java-topology/defects/salt/patch
History
russell@unturf.com f74250d8a3 feat: add UNDF-2026-000001266 (salt-0004) and UNDF-2026-000001267 (ansible-0004) CWE-1333 
Salt pcre/grain_pcre targeting passes user-controlled regex to re.match/re.compile
without timeout. Ansible inventory manager passes tilde-prefixed host patterns
directly to re.compile. Both fixed with ThreadPoolExecutor 1s timeout wrapper.
2026-04-13 09:56:20 -04:00
..
salt-0001-cloud-cycle-detection-set.patch undf: assign 721-726; salt-0001/0002/0003 CWE-407 list→set patches 2026-03-30 06:59:11 -04:00
salt-0002-thin-tops-set-dedup.patch undf: assign 721-726; salt-0001/0002/0003 CWE-407 list→set patches 2026-03-30 06:59:11 -04:00
salt-0003-saltclass-seen-set.patch undf: assign 721-726; salt-0001/0002/0003 CWE-407 list→set patches 2026-03-30 06:59:11 -04:00
salt-0004-pcre-redos-safe-wrapper.patch feat: add UNDF-2026-000001266 (salt-0004) and UNDF-2026-000001267 (ansible-0004) CWE-1333 2026-04-13 09:56:20 -04:00