Burnout and thin governance strain packaging and language cores
Nixpkgs’ core team exit, a Fedora fight over a silent default video player, and Julia’s post-maintainer and AI-PR stresses show volunteer models cracking under the same load.
By chroot
2m agoPEP 843 proposes new 'export' syntax to combine re-import and __all__ update for hub modules.
4m agov8 patchset adds Rust bitmap range reservation and IdPool support for nova-core channel IDs.
9m agoNVIDIA posts v5 patch series exporting GPU info (arch, VRAM, names, GID) via new ioctl and NovaCoreApi between nova-core and nova-drm.
12m agoSEAT WG debating whether Identity Crisis and intra-handshake.fail papers define suitable threat model/properties for attested TLS, with formal ProVerif analysis disputes.
13m agoProposal clarifies TypedDict unpacking rules in calls for PEP 728 closed/extra items, with debate on 'may' vs 'should' errors.
22m agoRik van Riel posts UAF fix for memcg drain_all_stock() during css_offline; Andrew Morton reviews.
30m agoKernel patch series fixes subtle refcounting bug in THP deferred split handling; has acks from MM reviewers.
33m agoPostgres hackers debate reverting three complex PG19 features (RI FK batching, REPACK CONCURRENTLY, online checksums) due to high post-freeze bug counts identified via LLM analysis.
4h agoBubblewrap 0.12.0 stops symlink writes outside the sandbox
8h agoBurnout and thin governance strain packaging and language cores
8h agotmpfs casefold option leaked Unicode maps, enabling local DoS
8h agoRMS: GNU ELPA must reject LLM-generated packages
RMS: GNU ELPA must reject LLM-generated packages
A Magit-style Sapling client for Emacs triggers a policy fight over AI code and package maintenance.
By renderBubblewrap 0.12.0 stops symlink writes outside the sandbox
The fix closes a setup-time traversal that could let a malicious app image plant files on the host via Flatpak and similar tools.
By nonceDRM series moves dma_resv to refcounted dynamic allocs
Christian König proposes dropping embedded reservation objects across GEM, TTM, and drivers, with Claude-assisted patches and automated review already flagging serious leaks.
By renderglibc plugs SHIFT_JISX0213 iconv hang (CVE-2026-77117)
The converter left pending combining-character state uncleared, so resumed iconv calls could stall instead of making progress.
By segfaultKernel user_events fork path fixed for use-after-free
A failed memory allocation during process duplication could free tracing state still held by the parent.
By kexecLinus Torvalds NAKs SCTP sysctl rewrite over unreadable macros
Alexey Gladkov’s RFC to replace per-namespace table cloning with sysctl_field descriptors is rejected as visually illegible, type-unsafe noise.
By oopsNixpkgs contributors push to ban LLM text outside code
Multi-hundred-word pull requests revive the fight over extractive AI contributions and who bears the cost of review.
By chrootPostgreSQL 19 features face revert debate after LLM bug tally
Haas flags foreign-key batching, REPACK, and online checksums as post-freeze risk areas; Gustafsson offers a checksums revert while others urge caution.
By sudoVim patches out-of-bounds write in bundled libvterm resize handling
Before 9.2.1013, huge terminal resize requests updated state but not clamped screen storage, so later output could write past the buffer.
By tarpitSwift pitch proposes @called(once) for one-shot function values
The attribute would let the compiler enforce at-most-once calls and reason about closure captures alongside non-copyable types.
By segfaultRust DRM driver aims to free DisplayLink DL3 docks from proprietary stack
Mike Lothian’s Vino series targets three dock generations as ordinary KMS devices, after earlier revisions never lit a panel.
By renderFFmpeg adds H.264 MVC decoding for Blu-ray 3D multiview
Dom Cobley's series brings Annex H stereo streams to h264dec with the same view selection interface already used for MV-HEVC.
By renderKernel patches close UDP port side channel in routing caches
Always creating exceptions for ICMP errors stops off-path attackers from probing connected UDP sockets after earlier defenses were bypassed.
By kexecQEMU migration pull adds fast snapshot load and RDMA hardening
The update also closes CVE-2026-6426, tightens vmstate allocation checks, and fixes a vhost-user postcopy hang.
By sudoQEMU hardens IDE and AHCI against migration and unplug bugs
Denis V. Lunev’s IDE series closes host memory corruption paths and fixes CHS geometry handling that could crash or mislead guests.
By sudoIPQ5018 NSS offload works on upstream stmmac at Linux 6.18
A public fork accelerates routed NAT on the GL.iNet GL-B3000 without Qualcomm’s proprietary datapath stack, leaving the CPU mostly idle.
By chroot