Sunday, October 25, 2026

If this page is useful, please consider donating a coffee

Saturday, October 24, 2026

Friday, October 23, 2026

Bazel releases addressing the eMudhra CA compromiseThe Bazel team has published new releases of Bazel and Bazelisk to address the recent disclosure of the eMudhra intermediate CA private key compromise . The following Bazel releases remove the distrusted eMudhra and Sectigo AAA root CA certificates from the bundled JDK: 7.7.2 8.8.2 9.3.1 10.0.0rc2 If you cannot immediately upgrade to one of the patched releases above (or are using an older, unsupported Bazel release), you can work around the issue by passing --host_jvm_args=-Djavax.net.ssl.trustStore= to point Bazel's JVM at an updated trust store that excludes the distrusted roots. We have also released Bazelisk v1.30.0 , built with Go 1.27.3 to address CVE-2026-111943 . Thanks to community member James Sharpe for bringing this issue to our attention.📝Bazel Blog

Thursday, October 22, 2026

Wednesday, October 21, 2026

Microsoft CppCon 2026 Trip ReportCppCon 2026 is a wrap! Microsoft returned to Aurora, Colorado, for a week of talks, technical discussions, and conversations with developers from across the C++ community. Microsoft C++ @ CppCon At our booth, we met people building games, financial systems, developer tools, embedded software, scientific tools, and other applications. Some were working with the latest […] The post Microsoft CppCon 2026 Trip Report appeared first on C++ Team Blog .📝C++ Team Blog
Security advisory: CVE-2026-105923 - Null-pointer dereference in QTriangulator reachable through VectorImageA denial-of-service vulnerability in the Qt Framework VectorImage QML type of the Qt Quick Vector Image module has been discovered and has been assigned the CVE id CVE-2026-105923. Affected versions: from Qt 6.8.0 to Qt 6.8.8, from Qt 6.9.0 to Qt 6.11.2 Impact: Processing specially crafted SVG content with the VectorImage QML type can cause the application to crash, resulting in loss of availability. CVSS 4.0 Score: 4.0 / MEDIUM Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/RE:L/U:Green Mitigation: Do not load untrusted SVG files with the VectorImage QML type. Solution: Apply the following patch or update to Qt 6.8.9, Qt 6.11.3 or Qt 6.12.0 or later. Patches: dev: https://codereview.qt-project.org/c/qt%2Fqtbase/+/762279📝Qt Blog

Tuesday, October 20, 2026