sysm 1.26.3.1 — Q3 2026 Security Completion Release

This revision completes the remaining P3 remediations from the repository security review. Together with the P2 hardening shipped in v1.13.3 and consolidated in v1.26.3.0, every reportable P2 and P3 item from that review now has a merged source fix.

Security fixes

• Prevents destructive Apple Notes export collisions. Export filenames now retain a readable title prefix plus a stable note-identity suffix, the complete batch is checked before writing, and notes import --delete independently requires one-to-one source and destination identities before deleting anything.
• Prevents Photos export from following a symbolic link at the destination. The final path component is opened with no-follow semantics, verified as a regular file before truncation, and written through the validated descriptor.

Compatibility

• Notes export filenames now include a stable identity suffix. Automation that predicts filenames from note titles alone should consume the returned export path instead.
• Photos export still creates new files and replaces existing regular files. Symbolic links, directories, FIFOs, and other special files at the final destination are now rejected.

Validation

Both fixes include exploit regressions and legitimate-behavior coverage. Their pull requests passed debug and release builds, test coverage, formatting and lint checks, and DocC validation before merge.

Changes since the previous release

• SYSM-82: release 1.26.3.1 (#8) (346c683)
• SYSM-81: prevent Photos export symlink writes (#7) (24843da)
• SYSM-80: prevent destructive Notes export collisions (#6) (1b61781)

Installation

Homebrew

brew tap brndnsvr/tap
brew install sysm

Direct Download

curl -L -o sysm.tar.gz https://github.com/brndnsvr/sysm/releases/download/v1.26.3.1/sysm-1.26.3.1-macos-arm64.tar.gz
tar -xzf sysm.tar.gz
sudo mv sysm /usr/local/bin/

SHA256: 33924839dec077acf8c32f34ee51a07b215ca9f866e1b1835c4250c42d2d4d21