FR
live
tag

#rust

Gitoxide patches five parsing flaws that leak credentials and traverse directories

On August 30, 2026, the gitoxide project — the pure-Rust implementation of Git — shipped a bundled fix for five parsing vulnerabilities, including an HTTP credential leak and several submodule-based path traversals. The lesson for anyone pulling Rust libraries: memory safety is no substitute for input validation.

CachyOS rewrites Shelly in Zig and lays the groundwork for its server edition

On August 9, 2026 CachyOS shipped its fifth ISO of the year: the Shelly package manager was rewritten from C# to Zig, and the first experimental server-edition profiles landed in the installer. The Zig and Rust rewrite is the tell — the performance-oriented distribution is no longer aiming only at the gaming desktop.

Vaultwarden replaces Bitwarden everywhere you self-host your passwords

Vaultwarden 1.37.0, released July 24, 2026, is a complete Rust rewrite of the Bitwarden server that sips 50 MB of RAM while the official server gulps 2 GB. If your passwords run on your own hardware, you have exactly zero rational reasons left to use the official Bitwarden server.

Type at least two characters.

navigate open esc dismiss