Salt pcre/grain_pcre targeting passes user-controlled regex to re.match/re.compile without timeout. Ansible inventory manager passes tilde-prefixed host patterns directly to re.compile. Both fixed with ThreadPoolExecutor 1s timeout wrapper. |
||
|---|---|---|
| .. | ||
| ans-0001-role-get-vars-seen-id-set.md | ||
| ans-0001-role-get-vars-seen-id-set.patch | ||
| ans-0002-role-collections-set.patch | ||
| ansible-0001-role-get-vars-seen-list.md | ||
| ansible-0002-host-add-group-linear-scan.patch | ||
| ansible-0002-role-collections-set.md | ||
| ansible-0003-handler-notify-host-linear-scan.patch | ||
| ansible-0004-inventory-regex-redos-safe-wrapper.patch | ||