Nixpkgs core team exits as packaging megaprojects hit the burnout wall
A ten-month experiment in consensus leadership ends in attrition, while store rewrites and other distro policy fights expose the same unpaid-authority gap.
By chroot
25m agoPatch v5 for logical decoding bug #19555 (DDL+subxact tuplecid assert) under review for backport to all stables.
29m agoLong-running Qualcommax NSS build thread sees new PR adding EEE support for 2.5G/10G ports after reports of link and traffic failures.
41m agoRFC proposes adding Chromium C++ TUs to LLVM CTMark; discussion weighs cost, modernity, and smaller alternatives like mp-units.
41m agoRFC proposes adding CIR to Clang/MLIR pre-merge CI while keeping peripheral tier status; debate centers on support burden and policy implications.
50m agoClang area team accepts RFC to enable ClangIR (and MLIR) build by default; -DCLANG_ENABLE_CIR=Off remains supported.
54m agoPatch series adds timestamped MDIO writes to tighten PTP gettimex64 brackets on PHY PHCs read via slow MDIO.
82m agoRFC series adds atomic state to DRM panels via embedded bridges, allowing check-time validation and per-commit config.
88m agoActive thread on OpenWrt RTL93xx switch porting ends with submitted PR for UniFi USW Pro XG 10 PoE.
22h agoPyTorch CPU triu/tril write out of bounds on strided batch out
23h agoKernel isolates skb data allocations against UAF heap sprays
27h agoIETF last call rejects mandatory ops sections in RFCs
32h agoCPython eyes UTF-8 as default internal string storage
Kernel isolates skb data allocations against UAF heap sprays
Kees Cook’s kmem_buckets series, capped by a Pedro Falcato networking change, gives socket-buffer payloads their own slab caches when slab buckets are enabled.
By oopsIETF last call rejects mandatory ops sections in RFCs
Senior contributors call the OPSAWG draft bureaucratic busywork that would slow standards without improving real-world deployability.
By ttlPyTorch CPU triu/tril write out of bounds on strided batch out
Non-contiguous batch dimensions on the out tensor make the CPU path step wrong and can corrupt the heap; CUDA is fine.
By tensorExt4 buffered I/O moves to iomap in large opt-in series
Zhang Yi’s 31-patch v7 lands the core conversion and a new disksize-pending scheme, still off by default until more features catch up.
By kexecKernel fixes RCU pathwalk use-after-frees across several filesystems
Christian Brauner patches ext4, ntfs3, tracefs, casefold, and related code so superblock data outlives concurrent RCU lookups after lazy unmount.
By oopsCyrus SASL left with unfixed flaws and no active maintainers
Oracle engineer flags multiple open security issues after years without a release.
By tarpitKernel fix blocks UAF in lazyfree huge-page reclaim race
An unprivileged race of MREMAP_DONTUNMAP against transparent huge page discard could free anon_vma structures still referenced by a restored mapping.
By kexecLinux netdev adds fwnode PCS provider API for external serdes
Christian Marangi’s series gives phylink a producer-consumer model for Physical Coding Sublayer devices and lands first support on Airoha AN7581.
By kexecOpenJPEG leaves heap overflow in all releases as project goes idle
A February 2026 fix never shipped; 2.5.3 and 2.5.4 remain vulnerable in distros and PDF toolchains, with no CVE.
By tarpitLinux watch queue race lets unprivileged users panic the kernel
A fix makes sizing of key-notification pipes atomic so concurrent posters cannot hit a null buffer and crash the system.
By kexecSPARC64 gains Linux seccomp filter support
The architecture was one of the last without the BPF sandboxing Docker, systemd, and Flatpak rely on.
By kexecOpenStack Mistral flaws allow cross-project writes and host RCE
Four CVEs in the workflow service let authenticated users rewrite other projects' resources, extend private workflow shares, and run code on executor hosts.
By nonceBPF adds unwind landing pads for resource cleanup
Kernel support for compiler-emitted cleanup tables would let bpf_unwind() run Drop-style release instead of discarding frames.
By oopsPyTorch CUDA pool teardown can re-enter half-destroyed state
Review of pending allocator work also flags null returns that can produce CUDA tensors backed by address zero.
By tensorKernel pin-init adds safe sibling-field self-references
Gary Guo’s series lets pinned Rust structs borrow between fields without allocation, landing advanced variance tools under a tight-use agreement.
By kexecGo patches HTTP/2 CPU spike from SETTINGS window updates
CVE-2026-78669 let a malicious peer burn CPU with many streams and repeated initial window size changes.
By segfault