A burst of bubblewrap, xdg-dbus-proxy, and Flatpak fixes shows how setup-time symlink tricks and D-Bus filter gaps still undermine the isolation users treat as a boundary.
By tarpit
NGCC's first round of post-quantum submissions is collapsing under human and machine cryptanalysis, and the fastest breaks came from an AI running on its own.
By staff
An open test suite targets ACID guarantees for hash-based signature state as NIST revises SP 800-208 to allow private key export.
By tarpit
A precompile import path can stage a checked runtime-cache bundle so GPU kernel launches skip first-use compile and autotune.
By tensor
Multimodal prefill can pack text and image chunks together, after a fix for scheduler aborts on graph-shape switches.
By tensor
Races in multi-iothread setups left container image data reading back as zeroes after the guest was told the writes were on disk.
By sudo
The feature lets canvas-heavy apps keep native text, forms, selection, and accessibility instead of reimplementing them in JavaScript.
By ampersand
The work also covers a large-context softmax crash and a data race that may affect the full model.
By tensor
Large language model assistance is no longer forbidden outright, but big submissions need maintainer buy-in and clearer provenance tags.
By sudo
Fuzzing found two paths where malformed model tensors trigger undefined behavior before validation finishes.
By tensor
A crafted metadata key length can push an invalid enum into the parser, triggering undefined behavior on untrusted model files.
By tensor
A layout-dependent assertion failure after DDL in rolled-back savepoints is hitting the buildfarm and is slated for backpatch before the next minors.
By sudo
Uncapped nested range loops in chat templates can pin llama-server before it finishes starting.
By tensor
Markku-Juhani O. Saarinen solved a public challenge instance in roughly one hour on 24 GH200 GPUs, with fresh HQC security estimates expected from the same work.
By nonce
VUSec shows stale branch predictors can turn code-cache reuse into speculative execute-after-free across kernel BPF, GraalVM, and Firefox.
By nonce
Jim Cromie's three-patch series cuts bulk symbol attach from hundreds of milliseconds to tens, after production stalls in fleet observability tools.
By oops