Python export debates, glibc and binutils CVEs, Git pack fixes

Python discourse saw heavy traffic on module export and ABI proposals, while security fixes landed for glibc and binutils. Git developers advanced pack and clone space-reclaim work.

PEP 842 revises module exports

A revised PEP 842 proposing an export keyword and optional runtime enforcement for module visibility drew a 115-post thread on discuss.python.org. Twenty-seven participants debated the design for controlling what a module exposes. The change would give library authors clearer tools for public API boundaries.

Glibc tdelete out-of-bounds write fixed

A patch on libc-alpha fixes an out-of-bounds array write in tdelete (bug 34506, CVE-2026-19542). The change removes alloca and switches to fixed max-size arrays. The fix closes a memory-safety hole in the tree-deletion path used by many C programs.

One-time CPython stable ABI break proposed

A discuss.python.org thread floated a single stable-ABI break after CPython 3.15 so the PyObject header can change. Twelve participants weighed performance and maintainability gains against compatibility cost. The idea aims to unblock long-standing object-layout constraints without repeated breakage.

Binutils BFD use-after-free patched

Binutils received a fix for a use-after-free in _bfd_load_armap archive map loading (PR ld/24600, CVE-2026-19548). The patch is marked ready to commit. It removes a class of crash or corruption risk when BFD handles archives.

PEP 844 public and private builtins

PEP 844, which adds public() and private() builtins to manage all, saw active discussion with 77 messages from 23 participants. The proposal seeks a more explicit way to mark module-level names. Readers tracking Python packaging and API hygiene will want the outcome.

Git repack --drop-filtered for partial clones

An RFC series adds git repack --drop-filtered so partial clones can reclaim space from filtered promisor blobs. Maintainers indicated readiness to queue the work for the next cycle. The option addresses disk growth that partial-clone users otherwise cannot reclaim safely.

Git packfile list performance fix

A patch removes an O(N²) regression in packfile list handling that appeared with tens of thousands of packs. It introduces a skip_dup_check fast path. Repositories that accumulate many pack files regain linear scaling on common operations.