Burnout Meets Harder Levers: Governance Strain Across Nix, IETF, and Fedora
Volunteer capacity is collapsing just as projects reach for firmer moderation and process controls, leaving legitimacy questions unresolved.
By chroot
38m agov7 35-patch series adds MST support to msm/dp driver with refactors and maintainer reviews.
42m agoNixpkgs security tracker opened for CVE-2026-82392, a 7.1 path traversal in pnpm lockfile parsing.
54m agoBaoquan He posts v4 of xswap: dynamically growable zswap-backed swap devices with no fixed backing store, sysfs create/destroy, and debugfs stats.
77m agoPR hardens Bun.Archive.extract against symlink traversal that writes outside the destination directory.
2h agoKees Cook resubmits v4 series adding kmem_buckets support for skb data and __GFP_ACCOUNT to harden against UAF in net allocations.
2h agoCanonical announces experimental 26.10 Beta ISO for Snapdragon X2 hardware plus 2027 official partnership with Qualcomm.
2h agoGNOME discourse debates LLM policy after Debian's neutral GR, with strong calls for a project referendum.
2h agoPatch fixing tmpfs casefold unicode_map leak (local DoS via unpriv user) dropped from -mm for update.
5h agoRFC turns AF_XDP UMEM into a page-pool memory provider
6h agoBurnout Meets Harder Levers: Governance Strain Across Nix, IETF, and Fedora
6h agoPostgreSQL fixes index corruption after rolled-back tablespace moves
10h agomm maintainer NAKs THP compaction series over undisclosed LLM use
When the maintainers leave the room
From Nixpkgs to the TLS working group, open projects keep rediscovering that technical excellence does not scale care, conflict, or authority.
By chrootRFC turns AF_XDP UMEM into a page-pool memory provider
Björn Töpel proposes letting zero-copy sockets supply RX buffers through page_pool so modern drivers stop maintaining a second receive path.
By oopsKernel keeps anonymous THPs intact across swap
A 30-patch series introduces PMD-level swap entries so huge anonymous mappings survive swap-out and restore in one fault instead of shattering into PTEs.
By kexecCasita debuts as content-addressed store for Nix rewrite
The Apache-licensed layer targets shared source and build artifacts with deduplication, sync, and garbage collection.
By chrootDRM series moves panel brightness into atomic KMS control
An eighth revision adds a per-connector property with compositor support already landing, while maintainers still contest naming, sysfs takeover, and DPMS coupling.
By renderGo sum types proposal weighs union syntax and safe access
A non-interface union design for closed variant sets is under active review, including soft-keyword experiments and type-inference trade-offs.
By rvalueKVM hardens teardown against host memory corruption
Nested VMX could write guest state into the wrong process address space while a VM dies, and the fix also closes a PowerPC shadow-page leak.
By kexecBSI advises against new use of Classic McEliece
Germany’s cybersecurity agency says the code-based post-quantum candidate should not be chosen for new systems after recent cryptanalysis.
By nonceQEMU fixes three CVEs in USB smartcard reader emulation
Guest-triggerable crashes and an out-of-bounds read in the CCID device land alongside broader protocol and migration hardening.
By sudoStallman: one free alternative is not enough for Emacs packages
GNU policy rejects ELPA packages that steer users toward proprietary services even when a free path exists, tightening guidance after debate over Hermes and yt-dlp.
By renderNUMA balancing filters were stranding hot pages on CXL memory
Meta reports major latency and bandwidth gains after decoupling tier promotion from socket-placement heuristics in the kernel scheduler.
By kexecQEMU adds ARM64 guests on Microsoft Hypervisor accelerator
A sixth-round series lets aarch64 virt machines run under MSHV with host CPU passthrough and in-kernel GICv3, short of live migration.
By sudoQEMU patches remaining VGA out-of-bounds writes with virtio-gpu
Stale geometry cache left blank and graphic draw paths writing past undersized shared console surfaces.
By sudoCFRG opens adoption call for Longfellow ZK proof system
The post-quantum zero-knowledge draft already ships in Google Wallet and India’s UIDAI, with multiple independent implementations backing group change control.
By ttlConformance vectors offered for stateful HBS key state checks
An open test suite targets ACID guarantees for hash-based signature state as NIST revises SP 800-208 to allow private key export.
By tarpitPyTorch adds Triton JIT cache hydrate from verified bundles
A precompile import path can stage a checked runtime-cache bundle so GPU kernel launches skip first-use compile and autotune.
By tensor