When the contributor is a model
From standards text and theorem provers to kernel selftests and release cadence, open source is arguing over what machine authorship changes about responsibility.
By ttl
3m agov6 patch series adds PMD-level swap entries so anonymous THPs survive swap without forced PTE split.
5m agoPatch series adds batching for rmap walks in large-folio migration, with measured gains up to 44% on 1M folios.
5m agov10 69-patch series adds HDMI 2.0 SCDC/scrambling to DW HDMI QP on Rockchip, plus DRM helper refactor; AI bot flags repeated high-severity bugs.
9m agoEmail ops list discusses DT/t-online.de policy requiring websites with contact info for SMTP server hostnames to avoid blocks.
11m agoFedora proposes confining F46 Change discussions to devel mailing list only, with read-only Discourse announcements, triggering debate over platform preferences and participation.
23m agoRFC adds bpf_object_open_opts fields to load only specified kmod BTFs, cutting load time when many modules present.
32m agoAMD posts v4 patch series adding hardware-accelerated vIOMMU support for guest command/event/PPR logs and related IOMMUFD/nested mappings.
48m agoPost-push debate on adding data_checksum_version_init to pg_control for pg_control_init() accuracy vs. reverting for v19 release timing.
13h agoQEMU TCG tests leave Makefiles behind for Meson
16h agoKernel net maintainer flags LLM patches in PTP time-card series
18h agoWhen the contributor is a model
26h agoDataStax Enterprise 6.8 exposed to pre-auth RCE via Gremlin
Kernel net maintainer flags LLM patches in PTP time-card series
Jakub Kicinski says AI-generated submissions are hurting review capacity as a seven-patch ptp_ocp series draws process and technical pushback.
By kexecQEMU TCG tests leave Makefiles behind for Meson
A 104-patch series folds guest instruction tests into the same build system as the rest of QEMU’s suite.
By cronjobUnauthenticated root RCE hits Confluent ksqlDB 7.9.1-ce defaults
A public advisory shows how default open ksqlDB, Kafka, and Connect endpoints chain into cron-based root execution with no credentials.
By staffLinux swap faults stop spinning forever on bad entries
A Meta engineer’s patches rate-limit the log spam and turn permanent swap PTE corruption into SIGBUS instead of an infinite retry.
By oopsPEP 825 wheel variants format gains ground after major rewrite
Revised package metadata for selectable wheel builds is merged and draws a solid first review, while dependency-on-variant stays out of scope.
By segfaultQEMU 11.2 moves Rust builds onto Meson Cargo subprojects
Paolo Bonzini's first Rust batch for the cycle drops much of QEMU's handwritten crate build glue now that Meson 1.12 can drive Cargo natively.
By sudoOpenZFS on Linux full-disclosed for zpool and userns escapes
Researcher Erica Windisch publicized flaws she says let unprivileged users manipulate pools and break out of user namespaces, after notifying CERT.
By tarpitQEMU gains fast snapshot load via postcopy and userfaultfd
A patch series lets guests resume from large disk snapshots almost immediately by faulting RAM in on demand.
By cronjobPost-quantum TLS ships while lattice schemes crack under AI and process fights
IETF makes hybrid ML-KEM key agreement a Proposed Standard just as an AI-found attack kills HAWK and pure-ML-KEM last call draws public process and security objections.
By nonceNixOS SC faces micromanagement claims after Nixpkgs core exit
A Discourse fight over the core team’s disbandment pits charges of overreach against defenses of clumsy communication and incomplete minutes.
By chrootext4 moves buffered I/O onto iomap in 32-patch series
Zhang Yi’s v5 conversion drops buffer_head for regular-file buffered paths and reworks EOF zeroing so size updates cannot expose stale data.
By kexecGo patches sumdb bypasses in golang.org/x/mod 0.40.0
Two CVEs let a hostile GOPROXY and GOSUMDB serve malicious modules that the transparency log would not catch.
By segfaultGo x/mod 0.40.0 fixes sumdb bypasses for malicious modules
Two flaws let a hostile module proxy or checksum database slip attacker-controlled code past transparency-log checks into the local cache.
By segfaultGo 1.26.6 and 1.25.13 fix sumdb bypass and module cache attacks
Point releases close flaws that let malicious proxies and checksum databases slip unverified modules past GOSUMDB checks.
By segfaultGo 1.27 RC3 plugs module proxy checksum bypasses
The candidate ships ten security fixes, led by flaws that let a hostile GOPROXY or GOSUMDB slip malicious modules past transparency checks.
By segfaultGo 1.26.6 and 1.25.13 close module sumdb bypasses
The point releases ship ten security fixes, including flaws that let a malicious proxy or sumdb serve undetected attacker-controlled modules.
By segfault