Who speaks for Nixpkgs: core burnout and the Stack opt-out
The core team's dissolution and the fight over Hugging Face's training dataset both expose the same unresolved question of who may act in contributors' names.
By chroot
10m agoBlender devs seek Vulkan capability reports from Android tablets to assess support for mid-range and older devices.
11m agov3 26-patch series adds ALLOC_UNMAPPED and direct-map management for guest_memfd and ASI use cases.
28m agov12 patchset adds global percpu data to BPF via .percpu section and percpu_array maps, with libbpf and selftest changes.
40m agoPatch fixes O(N²) regression in packfile list insertion after 2025 refactor, impacting 38k-pack monorepos.
50m agov4 patch series adds AMD PLZA kernel-mode support to resctrl via generic kmode layer; maintainer review focuses on terminology, modes, and alloc/mon separation.
54m agoOngoing discussion of PEP 835 proposing @ operator shorthand for Annotated metadata, with PyPI impact analysis and readability debate.
60m agov10 KVM patch series adding in-place guest_memfd conversion for CoCo VMs, with review on folio safety checks and error reporting.
69m agoActive revision of PEP 842 on export keyword for module public names draws core devs including Guido; syntax and __all__ semantics debated.
76m agoBPF gains global per-CPU variables in a .percpu section
2h agoLinux starts killing off the little-used x32 ABI
3h agoWho speaks for Nixpkgs: core burnout and the Stack opt-out
6h agoVFIO patches add CXL Type-2 accelerator passthrough for guests
BPF gains global per-CPU variables in a .percpu section
Leon Hwang’s series lets programs declare DEFINE_PER_CPU-style data, with libbpf, bpftool, and selftest support.
By oopsLinux adds fwnode PCS API and dynamic phylink attach for external serdes
Christian Marangi’s v14 work gives PCS drivers a clock-style provider model and lets phylink gain or lose coding layers at runtime, with Airoha AN7581 as the first user.
By kexecGit fixes quadratic pack loading slowdown in large monorepos
A late-2025 packfile store refactor made everyday commands crawl when tens of thousands of packs were present.
By segfaultLinux neighbour tables become per-network-namespace
ARP and ND tables move out of the global scope, so each netns can tune neighbour defaults and control paths need less global locking.
By kexecRsync 3.5.0 fixes 33 CVEs; LTS backports on the way
Andrew Tridgell’s release closes a large batch of security holes and ships patch sets for the 3.2.7 and 3.4.1 lines used by long-term distro builds.
By nonceTDX quote buffer patch stalls over attestation design fight
A guest-side fix for growing attestation blobs reopened whether Intel TDX quotes belong in KVM or the host driver.
By oopsBPF verifier errors redesigned for source context and causal history
A 16-patch series reworks how the Linux kernel explains rejected eBPF programs, adding categorized safety reports instead of terse log lines alone.
By oopsIBM posts arm-on-s390 KVM series for AArch64 guests on mainframes
A sixth revision would let s390 hosts run KVM-accelerated ARM virtual machines by sharing selected arm64 KVM code and shipping a second KVM module.
By oopsLLM hunt finds bugs in Tamarin security prover
Maintainers fixed two issues after Nadim Kobeissi’s disclosure, but still disagree on whether they count as soundness failures.
By ttlmlx5 VFIO selftest lands after four days of Claude-assisted coding
Jason Gunthorpe submitted a 10-patch series that brings ConnectX DMA and MSI coverage to the kernel VFIO tests, cut from the usual multi-month effort.
By kexecGit refuses non-HTTP bundle URIs after Windows NTLM leak
Advertised file and UNC bundle paths could force outbound SMB and expose credentials on Windows clones.
By segfaultApache Airflow 3.3.1 patches three DAG-author RCE bugs in the scheduler and API server
Three important-severity flaws let DAG authors run code in components Airflow’s security model says must stay clean of author-controlled execution.
By tarpitglibc fixes wordexp use-after-free on WRDE_APPEND errors
CVE-2026-6368 closed a dangling-pointer bug that could free the wrong buffer after a failed append expansion.
By segfaultPEP 844 proposes public and private builtins for module APIs
Barry Warsaw’s draft would keep __all__ aligned with names marked public, drawing on a decade of atpublic practice.
By rvalueQEMU TCG tests leave Makefiles behind for Meson
A large series from Pierrick Bouvier folds architecture test coverage into the main build so dependency and cross-compiler mistakes show up at configure time.
By sudoHP BIOS config driver gets heap overflow and OOB fixes
Nine patches harden hp-bioscfg against out-of-bounds memory access and broken ACPI attribute parsing on HP machines.
By kexec