spyc
Expat 2.9.0 released, fixes two vulnerabilities
Re:Sourcehut account takeover via build logs (XSS in ansi2html)
on Friday September 25, 2026 @07:12AM (#49842914)
A free-for-life "Professional hackers" package (https://sourcehut.org/pricing/) would be the minimum compensation in my eyes.
Expat 2.8.5 released, fixes vulnerability CVE-2026-93990
Please report any build errors in the GitHub issue tracker so that the isseu can be fixed for everyone. Thank you!
How is this source code the original source and which parts? Please elaborate.
Expat 2.8.4 released, fixes 4 vulnerabilities
Re:The August 17 outage, and the work ahead
on Friday August 21, 2026 @11:02AM (#49389207)
I think he meant to say "prioritize" so that availability related work sees results sooner — "acceleration" — than it would without an increase in priority.
Re:libexpat now funded by the City of Munich for up to 6 months
on Monday August 17, 2026 @07:13AM (#49329128)
That's a great question!
Expat 2.8.3 released, fixes vulnerability CVE-2026-72522
libexpat now funded by the City of Munich for up to 6 months
Expat 2.8.2 released, fixes 13 vulnerabilities
Re:Curl will not accept vulnerability reports during July 2026
on Monday June 15, 2026 @12:14PM (#48543450)
Both libexpat ("Expat") and uriparser are following the curl security vacation and will not accept new vulnerability reports before 2026-08-01, starting today.
Steven, please fix the 1% loss/gain graph
Expat 2.8.1 released, CVE-2026-45186 and CVSS unreliability
Expat 2.8.0 released, includes security fixes
Expat 2.7.5 released, includes security fixes
Expat 2.7.4 released, includes security fixes
Python 3.14 started enabling color for argparse by default
Re:Show HN: Tacopy – Tail Call Optimization for Python
on Saturday December 13, 2025 @10:38AM (#46255299)
The current implementation breaks semantics of functions with tail recursion from within loops: https://github.com/raaidrt/tacopy/issues/1
sandwine 5.0.0 adds support for Wayland and PipeWire
Reconsider W3C Recommendation status of XSLT 2.0 and XSLT 3.0
Re:Python, the movie. The programming language's origin story comes to...
on Friday October 03, 2025 @07:16PM (#45468894)
Potentially the movie itself is also or more of interest. The related thread is: https://news.ycombinator.com/item?id=45056377
Expat 2.7.3 released, includes security fixes
Expat 2.7.2 released, includes security fixes
Re:Memory-safe sudo to become the default in Ubuntu
on Tuesday May 06, 2025 @08:40PM (#43911111)
Both implementations of doas for Linux have (the same) unfixed security issue:
- https://github.com/Duncaen/OpenDoas/issues/106
- https://github.com/slicer69/doas/issues/110
I have a hard time recommending doas over sudo on Linux when the issue has been fixed in sudo but not in doas.
Re:Redis is open source again
on Sunday May 04, 2025 @07:43PM (#43890588)
Lost trust for sure. Who knows if Redis would be AGPL now if Valkey did not exist.
DomainFactory WTF 2025
Re:You might want to stop running atop
on Thursday March 27, 2025 @02:36PM (#43496618)
If anyone wonders what atop looks like at runtime or what it would be useful for, there's a video dedicated to the tool at https://www.youtube.com/watch?v=27AtCR5ftyM .
Re:Problems with the Heap
on Thursday March 27, 2025 @11:09AM (#43494461)
I see, thanks!