A unilateral removal of org repos from the code-training dataset has split contributors over consent, copyright, and who speaks for the project.
By chroot
Maintainers settled on a repository instruction file telling coding agents to analyze only, after debate over tone, effectiveness, and optics.
By render
SE-0539 would let accessor macros promise the compiler that an initializer expression will run only after self is fully available.
By rvalue
Greg Kroah-Hartman wants write support dropped rather than more locking after concurrent writers could free the same string twice.
By kexec
Version 2.0.9 closes two heap memory bugs reachable from a malicious font server, one an incomplete fix from 2014.
By tarpit
A tapered burn aims to cancel issuance incentives near 50% staked; critics say it would crush solo yields and concentrate operators.
By ledger
Kernel verifier and JITs learn LLVM 23's convention so subprograms and kfuncs can return __int128 and small structs by value.
By oops
ARM64 this_cpu_* optimization RFC hits a hard architectural wall over divergent kernel page tables.
By oops
Direct reclaim after MADV_DONTNEED could free a page table while leaving a stale paging-structure cache entry.
By oops
Staff users could trigger disk writes or network requests via GDAL rasters in admin filters; four CVEs land in 5.2.17 and 6.0.8.
By tarpit
A 19-patch series stops clearing BH_Uptodate when metadata writes fail, fixing silent data loss and spurious warnings across multiple filesystems.
By kexec
Truncated control requests could return stale fence metadata to the guest; CVE-2026-18054 is closed by rejecting them.
By sudo
Virtio-gpu and vhost-user-gpu fixes stop heap overflows and host memory leaks from malicious guests before the 11.1 release.
By sudo
Omitted commits from a 2024 pipapo series leave use-after-free and double-free bugs in 6.6.y and older trees.
By kexec
Preemptible programs could reuse a per-CPU callchain buffer and inflate the copy length past the caller's buffer.
By oops
CVE-2026-62354 affected NiFi 1.10.0 through 2.10.0; version 2.11.0 now requires write access for Parameter Context validation.
By tarpit