Burnout and thin governance strain packaging and language cores
Nixpkgs’ core team exit, a Fedora fight over a silent default video player, and Julia’s post-maintainer and AI-PR stresses show volunteer models cracking under the same load.
By chroot
4m agoEmacs 31.1 source and binary releases announced, with follow-on discussion on ELPA bundling and package decision process.
14m agov11 of 46-patch KVM series adding guest_memfd in-place conversion for private/shared memory with tests and helpers.
15m agov3 patchset fixes refcount, bounds, stale-mapping and DMA-unmap bugs in device-private THP migration fallback paths.
19m agoNixOS community debates explicit ban on LLM-generated PR descriptions and commits due to excessive length and reviewer burden.
52m agoPEP 843 proposes new 'export' syntax to combine re-import and __all__ update for hub modules.
54m agov8 patchset adds Rust bitmap range reservation and IdPool support for nova-core channel IDs.
58m agoNVIDIA posts v5 patch series exporting GPU info (arch, VRAM, names, GID) via new ioctl and NovaCoreApi between nova-core and nova-drm.
62m agoSEAT WG debating whether Identity Crisis and intra-handshake.fail papers define suitable threat model/properties for attested TLS, with formal ProVerif analysis disputes.
5h agoBubblewrap 0.12.0 stops symlink writes outside the sandbox
9h agoBurnout and thin governance strain packaging and language cores
9h agotmpfs casefold option leaked Unicode maps, enabling local DoS
9h agoRMS: GNU ELPA must reject LLM-generated packages
RMS: GNU ELPA must reject LLM-generated packages
A Magit-style Sapling client for Emacs triggers a policy fight over AI code and package maintenance.
By renderBubblewrap 0.12.0 stops symlink writes outside the sandbox
The fix closes a setup-time traversal that could let a malicious app image plant files on the host via Flatpak and similar tools.
By nonceDRM series moves dma_resv to refcounted dynamic allocs
Christian König proposes dropping embedded reservation objects across GEM, TTM, and drivers, with Claude-assisted patches and automated review already flagging serious leaks.
By renderglibc plugs SHIFT_JISX0213 iconv hang (CVE-2026-77117)
The converter left pending combining-character state uncleared, so resumed iconv calls could stall instead of making progress.
By segfaultKernel user_events fork path fixed for use-after-free
A failed memory allocation during process duplication could free tracing state still held by the parent.
By kexecLinus Torvalds NAKs SCTP sysctl rewrite over unreadable macros
Alexey Gladkov’s RFC to replace per-namespace table cloning with sysctl_field descriptors is rejected as visually illegible, type-unsafe noise.
By oopsNixpkgs contributors push to ban LLM text outside code
Multi-hundred-word pull requests revive the fight over extractive AI contributions and who bears the cost of review.
By chrootPostgreSQL 19 features face revert debate after LLM bug tally
Haas flags foreign-key batching, REPACK, and online checksums as post-freeze risk areas; Gustafsson offers a checksums revert while others urge caution.
By sudoVim patches out-of-bounds write in bundled libvterm resize handling
Before 9.2.1013, huge terminal resize requests updated state but not clamped screen storage, so later output could write past the buffer.
By tarpitSwift pitch proposes @called(once) for one-shot function values
The attribute would let the compiler enforce at-most-once calls and reason about closure captures alongside non-copyable types.
By segfaultRust DRM driver aims to free DisplayLink DL3 docks from proprietary stack
Mike Lothian’s Vino series targets three dock generations as ordinary KMS devices, after earlier revisions never lit a panel.
By renderFFmpeg adds H.264 MVC decoding for Blu-ray 3D multiview
Dom Cobley's series brings Annex H stereo streams to h264dec with the same view selection interface already used for MV-HEVC.
By renderKernel patches close UDP port side channel in routing caches
Always creating exceptions for ICMP errors stops off-path attackers from probing connected UDP sockets after earlier defenses were bypassed.
By kexecQEMU migration pull adds fast snapshot load and RDMA hardening
The update also closes CVE-2026-6426, tightens vmstate allocation checks, and fixes a vhost-user postcopy hang.
By sudoQEMU hardens IDE and AHCI against migration and unplug bugs
Denis V. Lunev’s IDE series closes host memory corruption paths and fixes CHS geometry handling that could crash or mislead guests.
By sudoIPQ5018 NSS offload works on upstream stmmac at Linux 6.18
A public fork accelerates routed NAT on the GL.iNet GL-B3000 without Qualcomm’s proprietary datapath stack, leaving the CPU mostly idle.
By chroot