java-topology/defects/ansible/patch
russell@unturf.com f74250d8a3 feat: add UNDF-2026-000001266 (salt-0004) and UNDF-2026-000001267 (ansible-0004) CWE-1333
Salt pcre/grain_pcre targeting passes user-controlled regex to re.match/re.compile
without timeout. Ansible inventory manager passes tilde-prefixed host patterns
directly to re.compile. Both fixed with ThreadPoolExecutor 1s timeout wrapper.
2026-04-13 09:56:20 -04:00
..
ans-0001-role-get-vars-seen-id-set.md bazel-0003 + kicad-0002: build toolchain feature check + PCB zone filler O(Z²×L²); count 601→603 2026-03-27 22:38:32 -04:00
ans-0001-role-get-vars-seen-id-set.patch whitepaper: re-add 10 missing entries + 11 new defects this session, count 578→590; rebuild PDF 2026-03-27 22:18:31 -04:00
ans-0002-role-collections-set.patch whitepaper: re-add 10 missing entries + 11 new defects this session, count 578→590; rebuild PDF 2026-03-27 22:18:31 -04:00
ansible-0001-role-get-vars-seen-list.md bazel-0003 + kicad-0002: build toolchain feature check + PCB zone filler O(Z²×L²); count 601→603 2026-03-27 22:38:32 -04:00
ansible-0002-host-add-group-linear-scan.patch undf: assign UNDF-2026-000000823; stamp terraform-0001/ansible-0002/ansible-0003 2026-03-30 13:29:54 -04:00
ansible-0002-role-collections-set.md bazel-0003 + kicad-0002: build toolchain feature check + PCB zone filler O(Z²×L²); count 601→603 2026-03-27 22:38:32 -04:00
ansible-0003-handler-notify-host-linear-scan.patch undf: assign UNDF-2026-000000823; stamp terraform-0001/ansible-0002/ansible-0003 2026-03-30 13:29:54 -04:00
ansible-0004-inventory-regex-redos-safe-wrapper.patch feat: add UNDF-2026-000001266 (salt-0004) and UNDF-2026-000001267 (ansible-0004) CWE-1333 2026-04-13 09:56:20 -04:00