Git Vulnerability May Lead to Arbitrary Code Execution
A flaw in Git submodule name validation makes it possible for a remote attacker to execute arbitrary code on developer machines. Additionally, an attacker could get access to portion of system memory. Both vulnerabilities have been already patched in Git 2.17.1, 2.16.4, 2.15.2, and other versions.
Lazy FP State Restore Vulnerability Affects Most Intel Core CPUs
Intel has disclosed a new vulnerability affecting most of its Core processors and making them targets for side-channel attacks similar to Spectre and Meltdown. The vulnerability, dubbed Lazy FP state restore (CVE–2018–3665), allows a process to infer the contents of FPU/MMX/SSE/AVX registers belonging to other processes.
Caching Clang-Based C++ Compiler Zapcc Open-Sourced
Zapcc is a caching C++ compiler based on a fork of Clang/LLVM that claims to be up to 50x faster on recompilations and 2–5x faster on full builds. Developed by Creemple and initially released at the end of 2015, Zapcc is now open-source.
Rust 1.27 Adds Support for SIMD
SIMD support is the most notable new feature in Rust 1.27, along with a more explicit syntax for traits.