Technology and development
Brief updates on software development, applications and tools. Every item links to its original source.
Arch Linux has warned about two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619. According to the project, they allow remote code execution and affect versions before 8.5.12 and 8.3.36 in the respective branches.
Ubuntu reports that eMudhra CA private keys were compromised and has released ca-certificates updates. The changes remove the emSign Root TLS CA – G3 and Comodo AAA Certificate Services roots, which cross-signed eMudhra. Fraudulent certifi…
GitHub now lets repository administrators convert all branch protection rules in a repository to rulesets in one operation. Previously, conversion handled a single rule at a time. The update reduces manual work when migrating repositories …
GitHub announced a secret scanning audit log change taking effect on November 12, 2026. In affected secret_scanning_alert.* and secret_scanning_push_protection.bypass events, the business field will contain the enterprise slug instead of i…
GitHub has launched a public preview of package firewall for Enterprise Cloud customers, including those using data residency. The service sits between endpoints such as CI/CD hosts or coding agents and upstream registries, checking metada…
GitHub has made its REST API for Copilot model policies generally available. GET and PATCH endpoints let administrators retrieve and update policies at four levels: enterprises, enterprise teams, enterprise apps, and organizations. This pr…
GitHub deprecated six models on October 19, 2026, across most Copilot experiences, including chat, inline edits, ask and agent modes, and code completions. The change takes effect following an announcement on September 18.
WebKit says Safari on macOS 27 now blocks network access to third-party identity resolution infrastructure. These services invisibly collect email addresses during sign-in or newsletter registration and link them to persistent identifiers …
GitHub says unusual traffic may trigger temporary authentication requirements for some HTTPS clones and fetches of public repositories. An affected operation will fail with a message indicating that authentication is required. The protecti…
Microsoft has added Quick machine recovery support to Windows Server 2025 with the October 2026 security update. The company describes the feature as a way to help restore devices affected by widespread boot problems. It uses the Windows R…
GitHub announced CodeQL compatibility changes: installing Xcode 27 makes traced extraction unavailable for C/C++, C#, Go, Java, Kotlin, and Swift. It may also be unavailable on macOS 27. GitHub attributes this to Intel code being removed f…
Fedora has announced a switch to kmscon for virtual consoles tty1–tty6 starting with version 45. A userspace program will handle the terminal instead of the kernel’s fbcon implementation, adding font scaling, FreeType rendering, scrolling …
