Gzip 1.15 patches wrong-file deletion race and memory-safety bugs in decoder

·7 views

Gzip 1.15 was released on September 20, 2026, fixing a race condition that could cause the tool to delete the wrong file when another process renames a directory in the target path during compression. The release, announced by Jim Meyering on the GNU info-gnu mailing list, also resolves a locking failure on systems supporting O_PATH or O_SEARCH file flags. Several bugs in the .lzh decoder were addressed, including a buffer overflow triggered when decompressing an .lzh file after a .Z file, as well as two issues that produced corrupted output. The update additionally fixes use of uninitialized memory on malformed inputs and patches race conditions in the gzexe, zdiff, and znew helper scripts. No CVE identifiers were assigned, but the release is considered a security update given the memory-safety issues, especially for services that process untrusted archives.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Uber Exhausted Its Full 2026 AI Budget by April as Token Costs Spiral

Uber deployed Anthropic's Claude Code to around 5,000 engineers in December 2025 and burned through its entire annual AI budget by April 2026, with Microsoft also canceling internal Claude Code licenses over uncontrolled token costs. Despite per-token inference prices falling roughly 75% year-over-year, enterprise AI spending surged from $1.7 billion in 2023 to $37 billion in 2025, a pattern economists attribute to Jevons' paradox, where greater efficiency drives higher total consumption. Agentic workflows are a key accelerant, consuming 10 to 100 times more tokens than standard chat sessions because agents resend the full conversation context on every tool call. Reasoning-optimized models, which carry higher per-token costs, grew from negligible usage to over 50% of all enterprise tokens by late 2025, further inflating bills. Analysts warn that without deliberate token governance frameworks, companies will continue facing sudden budget overruns as AI adoption expands.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

WebForms Core Library Lets C++ Developers Build Server-Side Web Apps

WebForms Core (WFC) is an open-source, server-side UI manipulation library created by Elanat that enables C++ applications to control browser HTML interfaces without a separate frontend framework. The library works by having the C++ server generate UI commands that are executed in the browser by a companion JavaScript runtime called WebFormsJS. WFC is distributed as a single header file, WebForms.h, available on GitHub, making it straightforward to drop into any C++ project regardless of build system. In the demonstrated setup, WFC is paired with cpp-httplib, a lightweight C++ HTTP library, to handle server requests and responses alongside UI manipulation. The approach allows developers to build interactive web applications, including form-based tools and media players, using standard HTML and pure C++ on the server side.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SQL NULL Handling: How ISNULL, COALESCE, and NULLIF Work

Part 2 of a SQL NULL series covers three key functions for managing missing or invalid data in databases. The ISNULL function replaces NULL values with a specified default, though it is not supported in PostgreSQL, which relies on COALESCE instead. COALESCE is more flexible, accepting multiple fallback values and returning the first non-null result it encounters. NULLIF works in the opposite direction, returning NULL when two compared values are equal, making it useful for normalizing bad data or preventing division-by-zero errors. Together, these functions help developers write more reliable queries when datasets contain missing, unknown, or placeholder values.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How One Team Fixed Data Inconsistency by Centralising Reference Data into One Service

A distributed system architecture split balance-related data across three separate services, each with its own database and read patterns. All three services relied on the same reference data — including account types, statuses, and product attributes — but maintained independent local copies. Over time, this led to semantic inconsistencies where the same account appeared under different categories or interpretations depending on which service was queried. Users noticed conflicting information across screens, while engineers faced incidents, manual reconciliation, and eroding trust in the data. The team ultimately concluded that shared business semantics require a single authoritative source, prompting a move toward a dedicated reference data service.

0 comments Read more at DEV Community