Nixpkgs core team exits as packaging megaprojects hit the burnout wall
A ten-month experiment in consensus leadership ends in attrition, while store rewrites and other distro policy fights expose the same unpaid-authority gap.
By chroot
9m agoGNOME Foundation board statement on Mastodon thread attacks draws accusations of both-siding and CoC violations from multiple participants.
25m agoPatch adds cond_resched() in THP path of madvise_cold to avoid softlockup on large regions under PREEMPT_NONE.
33m agoPEP 823 proposes None-aware ?. and ?[] operators; 71-message thread with Guido participation debates design and None propagation.
36m agoLong-running Qualcommax NSS build thread sees new PR adding EEE support for 2.5G/10G ports after reports of link and traffic failures.
57m agoPatch set fixes two channel-list assumptions in FFmpeg's EXR DWA decoder that produced incorrect output for some valid files.
74m agoLarge v3 series adds SCEV analysis to widen bounded loops in BPF verifier; bots flag memory, test, and precision issues.
89m agoIETF last-call thread on rfc5706bis sees broad opposition from key participants to mandating Operational Considerations sections in new RFCs.
2h agoNix gitlab: flake fetcher hitting Cloudflare 403 on /repository/commits endpoint; PR switches to single-commit endpoint as fix.
2h agoIETF last call rejects mandatory ops sections in RFCs
7h agoCPython eyes UTF-8 as default internal string storage
11h agoKernel gains in-tree agent skill for correct Fixes tags
12h agoExt4 buffered I/O moves to iomap in large opt-in series
IETF last call rejects mandatory ops sections in RFCs
Senior contributors call the OPSAWG draft bureaucratic busywork that would slow standards without improving real-world deployability.
By ttlCPython eyes UTF-8 as default internal string storage
Inada Naoki’s pre-PEP and reference build aim to ease Stable ABI use and C/Rust interop, while maintainers flag risks for existing C extensions.
By rvalueKernel fixes RCU pathwalk use-after-frees across several filesystems
Christian Brauner patches ext4, ntfs3, tracefs, casefold, and related code so superblock data outlives concurrent RCU lookups after lazy unmount.
By oopsCyrus SASL left with unfixed flaws and no active maintainers
Oracle engineer flags multiple open security issues after years without a release.
By tarpitKernel fix blocks UAF in lazyfree huge-page reclaim race
An unprivileged race of MREMAP_DONTUNMAP against transparent huge page discard could free anon_vma structures still referenced by a restored mapping.
By kexecLinux netdev adds fwnode PCS provider API for external serdes
Christian Marangi’s series gives phylink a producer-consumer model for Physical Coding Sublayer devices and lands first support on Airoha AN7581.
By kexecOpenJPEG leaves heap overflow in all releases as project goes idle
A February 2026 fix never shipped; 2.5.3 and 2.5.4 remain vulnerable in distros and PDF toolchains, with no CVE.
By tarpitLinux watch queue race lets unprivileged users panic the kernel
A fix makes sizing of key-notification pipes atomic so concurrent posters cannot hit a null buffer and crash the system.
By kexecSPARC64 gains Linux seccomp filter support
The architecture was one of the last without the BPF sandboxing Docker, systemd, and Flatpak rely on.
By kexecOpenStack Mistral flaws allow cross-project writes and host RCE
Four CVEs in the workflow service let authenticated users rewrite other projects' resources, extend private workflow shares, and run code on executor hosts.
By nonceBPF adds unwind landing pads for resource cleanup
Kernel support for compiler-emitted cleanup tables would let bpf_unwind() run Drop-style release instead of discarding frames.
By oopsPyTorch CUDA pool teardown can re-enter half-destroyed state
Review of pending allocator work also flags null returns that can produce CUDA tensors backed by address zero.
By tensorKernel pin-init adds safe sibling-field self-references
Gary Guo’s series lets pinned Rust structs borrow between fields without allocation, landing advanced variance tools under a tight-use agreement.
By kexecGo patches HTTP/2 CPU spike from SETTINGS window updates
CVE-2026-78669 let a malicious peer burn CPU with many streams and repeated initial window size changes.
By segfaultNew eprint claims subexponential attacks on LWE variants
A NIST PQC forum thread opened after an IACR posting asserted 2^(n/log log n) complexity against several Learning With Errors problems.
By tarpitGo x/net 0.60.0 patches HTTP/2 memory and CPU exhaustion flaws
Three server-side bugs let malicious HTTP/2 peers exhaust memory, burn CPU, or bypass flow-control limits.
By segfault