PEP 843 proposes export statement for DRY hub-module re-exports
A single from-import form would also append names to __all__, targeting the double-entry tax that package facade modules pay today.
By segfault
20m agov2 of 31-patch series adds r000 GSP firmware boot support to nova-core Rust driver.
31m agoPython typing discussion on allowing __class_getitem__ on non-generic classes in annotations, with type-checker inconsistencies.
31m agoSwift pitch for @called(once) attribute enabling diagnostics and better ~Copyable closure handling.
44m agoKDE discourse thread debates AI/LLM usage policy, with clashes over ethics, discrimination, and AI-generated merge requests overwhelming maintainers.
2h agov13 standalone famfs patchset submitted for CXL-style disaggregated memory appliances.
2h agoV12 patchset proposes standalone famfs for disaggregated memory appliances; maintainers raise long-term VFS maintenance burden.
2h agoPatch fixes use-after-free of parent's ftrace ret_stack on non-CLONE_VM fork error path, with KASAN report and stable Cc.
2h agoNew Footstrap LuCI theme announced; users test performance gains on MT7621/ath79 and discuss backporting to 25.12.
8h agoPEP 843 proposes export statement for DRY hub-module re-exports
26h agoBPF gains dedicated signing keyring and ML-DSA support
28h agoKernel fix stops tasks hanging forever on muxed I/O regions
28h agoClassic McEliece team: new attack still slower than known methods
Go sumdb fixes reopen who anchors module trust
Two sumdb bypasses fixed across the Go toolchain show that a hostile GOPROXY and GOSUMDB pair could still feed undetected modules into the local cache, pressing the question of where module trust actually sits.
By segfaultEmacs TRAMP zero-click flaw runs local shell commands
Crafted remote-style file names can execute arbitrary local commands during connection setup, with no successful remote login required.
By tarpitClassic McEliece team: new attack still slower than known methods
Preliminary review of eprint 2026/1630 finds the claimed quasipolynomial approach above designed cost for every parameter set.
By tarpitLinux gains async device shutdown to slash reboot times
Opt-in parallel teardown can cut multi-minute waits to under a minute on systems with slow NVMe drives.
By oopsBPF cgroup link update fixed for stack out-of-bounds write
Replacement programs were matched only by type, so incompatible sock_addr and LSM hooks could clobber adjacent stack state.
By kexecGit makes transport packfile generation pluggable
Patrick Steinhardt routes fetch, push, and bundle packing through a new object-database interface so alternate backends need not pretend to be the files store.
By rvaluePEP 805 proposes race-free parallel Python by default
Mark Shannon’s plan would require explicit sharing of objects across threads, building on free-threading work with runtime checks and freezing.
By rvaluePEP 718 prototype lands as decorator questions stall it
Guido van Rossum shipped a mypy trial of subscriptable generic functions, but Callable typing and runtime wrappers still block consensus.
By rvalueRISC-V IOMMU series unlocks MSI remap, DMA, and VFIO assign
Andrew Jones posts v4 work to translate device MSIs through the IOMMU, opening default IOMMU_DMA and userspace PCIe assignment on 64-bit RISC-V.
By oopsCeph auth flaws force keyring rotation across OpenStack
Four CephX CVEs fixed in Ceph 19.2.6 and 20.2.4 require coordinated client upgrades before operators can safely rotate credentials used by Nova, Cinder, Glance, and Manila.
By tarpitJulia core sees agent-written PRs surge, community frets
After JuliaCon figures put AI authorship near four-fifths of recent language PRs, developers split on access, review norms, and whether the language still recruits humans.
By segfaultNova-core moves toward stable r000 NVIDIA GSP firmware ABI
An early-review Linux series would drop versioned GSP firmware names once the still-unreleased r000 blobs ship.
By kexecEmacs arbitrary code execution on file open hits 28.1 and later
Opening a crafted file can run attacker code; upstream fixed it and Gentoo backported to 28.2.
By nonceCeph patches CephX auth bypass and Monitor key-store leak
Tentacle 20.2.4 and Squid 19.2.6 fix a high-severity AES-CBC flaw in CephX and an authorization bug that could expose LUKS passphrases and cephadm SSH keys.
By tarpitKernel clamps qdisc quantum to stop lockups from huge MTUs
Overflows in fq, fq_codel, fq_pie, hhf, and sfq could hang dequeue loops or NULL-deref on drop.
By oopsFedora weighs dropping Showtime over Flatpak-only bugs
A GNOME developer says a default Workstation app that will not take distro bug reports leaves Fedora users unsupported.
By chroot