EILMELDUNGEN LIVE
🐧 Linux TippsDebian AI Vote has Divided the Community(30.08.2026 um 07:23 Uhr)
🐧 Unix ServerHow to Change Raspberry Pi Wi-Fi Details From the SD Card(02.09.2026 um 11:08 Uhr)
🔧 AI Nachrichten Codex CLI: Use OpenAI’s AI Coding Agent in the Linux Terminal(27.08.2026 um 12:31 Uhr)
🐧 Unix ServerHow to Manage Linux Updates Across Multiple Distributions(02.09.2026 um 09:38 Uhr)
🪟 Windows TippsChina Switching from Windows to Linux(24.08.2026 um 22:16 Uhr)
🐧 Linux TippsDistribution Release: NawaOS 2.0(27.08.2026 um 10:53 Uhr)
🐧 Linux TippsDistribution Release: Butterbian 0.4.0(27.08.2026 um 13:10 Uhr)
🐧 Linux TippsDebian AI Vote has Divided the Community(30.08.2026 um 07:23 Uhr)
🐧 Unix ServerHow to Change Raspberry Pi Wi-Fi Details From the SD Card(02.09.2026 um 11:08 Uhr)
🔧 AI Nachrichten Codex CLI: Use OpenAI’s AI Coding Agent in the Linux Terminal(27.08.2026 um 12:31 Uhr)
🐧 Unix ServerHow to Manage Linux Updates Across Multiple Distributions(02.09.2026 um 09:38 Uhr)
🪟 Windows TippsChina Switching from Windows to Linux(24.08.2026 um 22:16 Uhr)
🐧 Linux TippsDistribution Release: NawaOS 2.0(27.08.2026 um 10:53 Uhr)
🐧 Linux TippsDistribution Release: Butterbian 0.4.0(27.08.2026 um 13:10 Uhr)

29 🕛 kürzlich 4 Min Lesezeit CVE-RADAR
0

GitHub Release: cline/cline v4.1.17 (02.09.2026)

↗ Quelle (GitHub · cline/cline)
🗣️ Stimme:
GitHub Release: cline/cline v4.1.17 (02.09.2026)
📑 Inhaltsübersicht
Avatar
$ git clone https://github.com/cline/cline.git

Everything here lands through the SDK bundle, so it applies to windows running that bundle.


Added



  • ClinePass is now surfaced across the app: a card on the account page describing what the plan covers, a hint in provider settings, and a banner on the home screen. Dismissed banners stay dismissed.


Fixed



  • Fixed the background Hub process ballooning in memory during long sessions. Session status updates broadcast a full copy of the conversation transcript to every connected client, so on a large task each status change shipped megabytes and could grow the process to tens of gigabytes. Snapshots now carry state only.

  • Hook scripts that fail to spawn no longer crash the extension's core process and take the running task down with them.

  • Fixed a chat render crash on malformed api_req payloads.

  • Cost estimates no longer appear in task history for subscription-billed tasks (ClinePass, ChatGPT via Codex, and Claude Code), matching the task header.

  • Pasted provider API keys are now stripped of the invisible characters clipboards smuggle in (newlines, zero-width spaces, BOM). A key corrupted that way was hidden by the masked field and rejected by the provider with a 401 indistinguishable from a genuinely wrong key. Credential rejections now say that the API key is the problem and point at its configuration, keeping the provider's raw response as a diagnostic tail.

  • Signing in to OpenAI Codex (ChatGPT subscription) now fails with a clear "port in use" error when callback port 1455 is occupied. Previously the button opened a browser to a flow whose callback could never arrive, and nothing else happened. OAuth redirect errors such as access_denied are surfaced instead of being reported as a missing authorization code.

  • A transient network failure while refreshing OpenAI Codex or OpenAI-compatible-account tokens no longer signs you out. Only a genuinely rejected refresh token now requires re-authentication.

  • Fixed tool calling being silently disabled for Dify, SAP AI Core, opencode, and Codex CLI models. Their catalog entries declare no capabilities, and the empty list was read as an authoritative denial that stripped every tool from the request.

  • Fixed images being dropped from file reads on models whose capability list is empty.

  • Restoring a checkpoint now refuses to run when commits were made after it, instead of silently knocking them off the branch where only the reflog could recover them. Chat-only restore is unaffected.

  • apply_patch now preserves a file's existing CRLF line endings.

  • Global rules are now also read from ~/Cline/Rules, which is where the Rules tab writes them on WSL and headless installs whose Documents folder resolves to the home directory.

  • An enabled but unreachable remote (SSE or streamable HTTP) MCP server no longer stalls session startup; remote connects now have a 10 second budget.

  • Aborting a task now also cancels the delegated subagents and teammates it spawned, instead of leaving their work running.

  • Langfuse tracing now works in released builds. Detection identified the OpenTelemetry provider by class name, which minification renames, so tracing silently initialized as not ready in every published build while working in development.

  • Cline provider models are now read from the live catalog, so newly published models appear without an extension update.

  • Hook execution telemetry now fires; the task id was not threaded into hook runner creation, so those events were dropped.


Changed



  • Refreshed the built-in model catalog. Adds ten providers (Bothub, OpenReason, SenseNova (China), TokenGo, TokenRouter, Vancine, Volcengine Ark, Volcengine Ark Coding Plan, above.dev, and klokintegration.se) and updates model lists and pricing throughout. This is an unusually wide refresh: the resolved default model changes for 57 providers, most consequentially Anthropic, which now resolves to Claude Fable 5.1 instead of Claude Opus 5, with Amazon Bedrock, Vertex, OpenRouter, Vercel AI Gateway, Kilo Gateway, LLM Gateway, DevPass, DigitalOcean, CrossModel, Eden AI, and NanoGPT following. If you use a provider without pinning a model, expect a different default.

  • The message the model receives when you reject a tool call now names the rejected tool and reads as your decision rather than an error.


Full Changelog: v4.1.16...v4.1.17

Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf github.com.
↗ Original-Artikel auf github.com lesen
Wie bewertest du diesen Beitrag?
1 Klick Feedback
92 Fachleser & IT-Security Experten haben diesen Report heute geteilt
Teilen mit Netzwerk & Team:

Community-Analysen & Experten-Meinungen 0

Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.
Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf Eigene Analyse verfassen“!
Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum
🔴 Akute Relevanz 55%
🟡 In Evaluierung 28%
🟢 Keine Auswirkung 12%
Spannende Innovation 5%
Verwandte Story-Cluster & Quellen (Vektor-KI)
Port 8095 Engine
1 Quelle
Keep the Rebel Spirit Alive #TheSAS2026 #kaspersky #cybersecurity
1 Quelle
Exploits and vulnerabilities in Q2 2026
1 Quelle
MySQL Governance