SwiftNIO SSH CVE and Python PEP 841

SwiftNIO SSH disclosed an unauthenticated stack memory vulnerability, while Python developers advanced debate on a new frozen literal syntax proposal. Both items concern core language and networking toolchain safety and performance.

Unauthenticated OOB stack write in SwiftNIO SSH

SwiftNIO SSH maintainers disclosed CVE-2026-43798, an unauthenticated out-of-bounds stack write reachable via oversized ECDSA signatures in the swift-nio-ssh library. The flaw requires no prior authentication. Users of the library for SSH server or client roles should evaluate exposure and apply updates promptly.

PEP 841 frozen syntax for immutable types

PEP 841 proposes an f{} frozen literal syntax intended to make immutable types more readily optimizable by the Python runtime. The discuss.python.org thread, spanning 48 messages from 20 participants, examined ordering guarantees, alternative spellings, and the underlying motivation. The change would affect how developers express and rely on immutability for performance.