Tootfinder

shots fired:
> it’s abundantly clear that the talented folks who used to work on the product have moved on to bigger and better things, with the remaining rookies eager to inflict some kind of bloated, buggy JavaScript framework on us in the name of progress. Stuff that used to be snappy is now sluggish and often entirely broken.
…

Prompt Injection Bugs Found in Official Anthropic Git MCP Server
https://www.infosecurity-magazine.com/news/prompt-injection-bugs-anthropic/

Prompt Injection Bugs Found in Official Anthropic Git MCP Server
Three vulnerabilities in Anthropic's Git server for the MCP can be exploited via prompt injection

Honestly, #libfuse3 is the single worst library I have worked with. The API is a random mix of bugs, hacks and historical changes. The documentation is barely existing for the more common API, and practically non-existing for anything else. And upstream's attitude is, basically "lack of documentation is not a bug, feel free to contribute". Because obviously people have nothing better to do than dig through tons of your awful code, figure out how it interacts with the #Linux kernel, and then document it all.
#FUSE

Yay, Mastodon 4.5.1 (released last week) fixes the bug I reported! Really fast turnaround. Thanks ClearlyClaire! https://github.com/mastodon/mastodon/issues/36775

Ouch:
"I stumbled upon a bug in RNP that has been introduced when refactoring. Namely, session keys generated for PKESK are not randomized but always zero."
#RNP is #Thunderbird's implementation of #OpenPGP

Tiny bug fix release of `<table-saw>`: https://github.com/zachleat/table-saw/releases/tag/v1.0.7

It appears that the latest version of Portainer has a significant bug that prevents access to the local server environment, meaning you cannot manage your containers.
Until the developers fix the problem, the temporary solution is to use version 2.20.2.
https://github.com/portainer/portainer

#Jellyfin for #Roku 3.0.15 released
This release fixes a nasty #HDHomeRun Tuner bug.
Shout out to VTRunner, first contribution!!
Release Notes:

I received a bug report about picolibc's iconv implementation. So I added a test case. Which pushed the CI runtime up over *six hours* at which point github gave up and killed it.
I spent a bit of time yesterday and today re-implementing the JIS to Unicode conversion function to make it faster. Lines changed: 5125 additions & 7495 deletions. Runtime is back to normal now. And I have a deeper understanding of these encodings.

Iconv fixes by keith-packard · Pull Request #1141 · picolibc/picolibc
PR #1139 fixes one issue in iconv, but when I implemented an exhaustive test case, I found a bunch more.

I think I found a Node.js bug! https://github.com/nodejs/node/issues/61385