{"ref":"refs/heads/maint-1.3","before":"64483e3aba7e08d7904d4824c0654977c233f7a7","after":"96801348ce7be1aefe3f21e9266e2638fa37620b","repository":{"id":19279199,"node_id":"MDEwOlJlcG9zaXRvcnkxOTI3OTE5OQ==","name":"openscap","full_name":"OpenSCAP/openscap","private":false,"owner":{"name":"OpenSCAP","email":null,"login":"OpenSCAP","id":7439934,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc0Mzk5MzQ=","avatar_url":"https://avatars.githubusercontent.com/u/7439934?v=4","gravatar_id":"","url":"https://api.github.com/users/OpenSCAP","html_url":"https://github.com/OpenSCAP","followers_url":"https://api.github.com/users/OpenSCAP/followers","following_url":"https://api.github.com/users/OpenSCAP/following{/other_user}","gists_url":"https://api.github.com/users/OpenSCAP/gists{/gist_id}","starred_url":"https://api.github.com/users/OpenSCAP/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/OpenSCAP/subscriptions","organizations_url":"https://api.github.com/users/OpenSCAP/orgs","repos_url":"https://api.github.com/users/OpenSCAP/repos","events_url":"https://api.github.com/users/OpenSCAP/events{/privacy}","received_events_url":"https://api.github.com/users/OpenSCAP/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/OpenSCAP/openscap","description":"NIST Certified SCAP 1.2 toolkit","fork":false,"url":"https://api.github.com/repos/OpenSCAP/openscap","forks_url":"https://api.github.com/repos/OpenSCAP/openscap/forks","keys_url":"https://api.github.com/repos/OpenSCAP/openscap/keys{/key_id}","collaborators_url":"https://api.github.com/repos/OpenSCAP/openscap/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/OpenSCAP/openscap/teams","hooks_url":"https://api.github.com/repos/OpenSCAP/openscap/hooks","issue_events_url":"https://api.github.com/repos/OpenSCAP/openscap/issues/events{/number}","events_url":"https://api.github.com/repos/OpenSCAP/openscap/events","assignees_url":"https://api.github.com/repos/OpenSCAP/openscap/assignees{/user}","branches_url":"https://api.github.com/repos/OpenSCAP/openscap/branches{/branch}","tags_url":"https://api.github.com/repos/OpenSCAP/openscap/tags","blobs_url":"https://api.github.com/repos/OpenSCAP/openscap/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/OpenSCAP/openscap/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/OpenSCAP/openscap/git/refs{/sha}","trees_url":"https://api.github.com/repos/OpenSCAP/openscap/git/trees{/sha}","statuses_url":"https://api.github.com/repos/OpenSCAP/openscap/statuses/{sha}","languages_url":"https://api.github.com/repos/OpenSCAP/openscap/languages","stargazers_url":"https://api.github.com/repos/OpenSCAP/openscap/stargazers","contributors_url":"https://api.github.com/repos/OpenSCAP/openscap/contributors","subscribers_url":"https://api.github.com/repos/OpenSCAP/openscap/subscribers","subscription_url":"https://api.github.com/repos/OpenSCAP/openscap/subscription","commits_url":"https://api.github.com/repos/OpenSCAP/openscap/commits{/sha}","git_commits_url":"https://api.github.com/repos/OpenSCAP/openscap/git/commits{/sha}","comments_url":"https://api.github.com/repos/OpenSCAP/openscap/comments{/number}","issue_comment_url":"https://api.github.com/repos/OpenSCAP/openscap/issues/comments{/number}","contents_url":"https://api.github.com/repos/OpenSCAP/openscap/contents/{+path}","compare_url":"https://api.github.com/repos/OpenSCAP/openscap/compare/{base}...{head}","merges_url":"https://api.github.com/repos/OpenSCAP/openscap/merges","archive_url":"https://api.github.com/repos/OpenSCAP/openscap/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/OpenSCAP/openscap/downloads","issues_url":"https://api.github.com/repos/OpenSCAP/openscap/issues{/number}","pulls_url":"https://api.github.com/repos/OpenSCAP/openscap/pulls{/number}","milestones_url":"https://api.github.com/repos/OpenSCAP/openscap/milestones{/number}","notifications_url":"https://api.github.com/repos/OpenSCAP/openscap/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/OpenSCAP/openscap/labels{/name}","releases_url":"https://api.github.com/repos/OpenSCAP/openscap/releases{/id}","deployments_url":"https://api.github.com/repos/OpenSCAP/openscap/deployments","created_at":1398781414,"updated_at":"2026-09-28T13:21:54Z","pushed_at":1791213792,"git_url":"git://github.com/OpenSCAP/openscap.git","ssh_url":"git@github.com:OpenSCAP/openscap.git","clone_url":"https://github.com/OpenSCAP/openscap.git","svn_url":"https://github.com/OpenSCAP/openscap","homepage":"https://www.open-scap.org/tools/openscap-base","size":31619,"stargazers_count":1824,"watchers_count":1824,"language":"XSLT","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"has_discussions":true,"forks_count":452,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":71,"license":{"key":"lgpl-2.1","name":"GNU Lesser General Public License v2.1","spdx_id":"LGPL-2.1","url":"https://api.github.com/licenses/lgpl-2.1","node_id":"MDc6TGljZW5zZTEx"},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["compliance","cpe","data-stream","openscap","oval","scanning","scap","xccdf"],"visibility":"public","forks":452,"open_issues":71,"watchers":1824,"default_branch":"main","stargazers":1824,"master_branch":"main","organization":"OpenSCAP","custom_properties":{}},"pusher":{"name":"jan-cerny","email":"jcerny@redhat.com"},"forced":false,"organization":{"login":"OpenSCAP","id":7439934,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc0Mzk5MzQ=","url":"https://api.github.com/orgs/OpenSCAP","repos_url":"https://api.github.com/orgs/OpenSCAP/repos","events_url":"https://api.github.com/orgs/OpenSCAP/events","hooks_url":"https://api.github.com/orgs/OpenSCAP/hooks","issues_url":"https://api.github.com/orgs/OpenSCAP/issues","members_url":"https://api.github.com/orgs/OpenSCAP/members{/member}","public_members_url":"https://api.github.com/orgs/OpenSCAP/public_members{/member}","avatar_url":"https://avatars.githubusercontent.com/u/7439934?v=4","description":"Open Source Security Compliance Solution"},"sender":{"login":"jan-cerny","id":9050916,"node_id":"MDQ6VXNlcjkwNTA5MTY=","avatar_url":"https://avatars.githubusercontent.com/u/9050916?v=4","gravatar_id":"","url":"https://api.github.com/users/jan-cerny","html_url":"https://github.com/jan-cerny","followers_url":"https://api.github.com/users/jan-cerny/followers","following_url":"https://api.github.com/users/jan-cerny/following{/other_user}","gists_url":"https://api.github.com/users/jan-cerny/gists{/gist_id}","starred_url":"https://api.github.com/users/jan-cerny/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jan-cerny/subscriptions","organizations_url":"https://api.github.com/users/jan-cerny/orgs","repos_url":"https://api.github.com/users/jan-cerny/repos","events_url":"https://api.github.com/users/jan-cerny/events{/privacy}","received_events_url":"https://api.github.com/users/jan-cerny/received_events","type":"User","user_view_type":"public","site_admin":false},"created":false,"deleted":false,"base_ref":null,"compare":"https://github.com/OpenSCAP/openscap/compare/64483e3aba7e...96801348ce7b","commits":[{"id":"629b5d43fd83e58068e30c0e1e04b70b5f7ed449","tree_id":"8335becf29b5066756a4360a027b088dd24d3e19","distinct":false,"message":"XCCDF_POLICY: bound recursion on cyclic Profile @extends\n\nA cyclic Profile @extends chain (A extends B extends A) recursed until the\nstack overflowed, both directly and indirectly via policy creation\n(_xccdf_policy_add_profile_selectors -> xccdf_policy_model_get_policy_by_id\n-> xccdf_policy_new -> back here). Track nesting in a file-static counter and\nabort past a sane depth. Also use NULL-safe comparison for the shadowing check.\n\nNote: a sibling unbounded-recursion fix for cyclic ARF catalog component-refs\nlives in src/DS/sds.c, which is on the memory-corruption branch because it is\ncoupled with the use-after-free fix in the same function.","timestamp":"2026-10-04T18:02:23-05:00","url":"https://github.com/OpenSCAP/openscap/commit/629b5d43fd83e58068e30c0e1e04b70b5f7ed449","author":{"name":"Edouard Schweisguth","email":"edouard.schweisguth@datadoghq.com","date":"2026-06-03T08:47:03Z","username":"edznux-dd"},"committer":{"name":"Matthew Burket","email":"mburket@redhat.com","date":"2026-10-04T18:02:23-05:00","username":"Mab879"},"added":[],"removed":[],"modified":["src/XCCDF_POLICY/xccdf_policy.c"]},{"id":"b6f8d21c84928819fffdb4b3d4a98cf6260852c7","tree_id":"df34f33fd9c3e9e3c543b2211834c9dfa8803a65","distinct":false,"message":"PR comments","timestamp":"2026-10-04T18:02:30-05:00","url":"https://github.com/OpenSCAP/openscap/commit/b6f8d21c84928819fffdb4b3d4a98cf6260852c7","author":{"name":"edouard.schweisguth","email":"edouard.schweisguth@datadoghq.com","date":"2026-07-17T14:56:48Z","username":"edznux-dd"},"committer":{"name":"Matthew Burket","email":"mburket@redhat.com","date":"2026-10-04T18:02:30-05:00","username":"Mab879"},"added":[],"removed":[],"modified":["src/XCCDF_POLICY/xccdf_policy.c"]},{"id":"96801348ce7be1aefe3f21e9266e2638fa37620b","tree_id":"21bb6f9607ec441c24e4cc9702fd388a7246cc46","distinct":true,"message":"Merge pull request #2426 from Mab879/2364_maint_1_3\n\nBackport 2364","timestamp":"2026-10-05T17:23:12+02:00","url":"https://github.com/OpenSCAP/openscap/commit/96801348ce7be1aefe3f21e9266e2638fa37620b","author":{"name":"Jan Černý","email":"jcerny@redhat.com","date":"2026-10-05T17:23:12+02:00","username":"jan-cerny"},"committer":{"name":"GitHub","email":"noreply@github.com","date":"2026-10-05T17:23:12+02:00","username":"web-flow"},"added":[],"removed":[],"modified":["src/XCCDF_POLICY/xccdf_policy.c"]}],"head_commit":{"id":"96801348ce7be1aefe3f21e9266e2638fa37620b","tree_id":"21bb6f9607ec441c24e4cc9702fd388a7246cc46","distinct":true,"message":"Merge pull request #2426 from Mab879/2364_maint_1_3\n\nBackport 2364","timestamp":"2026-10-05T17:23:12+02:00","url":"https://github.com/OpenSCAP/openscap/commit/96801348ce7be1aefe3f21e9266e2638fa37620b","author":{"name":"Jan Černý","email":"jcerny@redhat.com","date":"2026-10-05T17:23:12+02:00","username":"jan-cerny"},"committer":{"name":"GitHub","email":"noreply@github.com","date":"2026-10-05T17:23:12+02:00","username":"web-flow"},"added":[],"removed":[],"modified":["src/XCCDF_POLICY/xccdf_policy.c"]}}