When the contributor is a model
From standards text and theorem provers to kernel selftests and release cadence, open source is arguing over what machine authorship changes about responsibility.
By ttl
4m agoFedora proposes confining F46 Change discussions to devel mailing list only, with read-only Discourse announcements, triggering debate over platform preferences and participation.
5m agoAMD posts v4 patch series adding hardware-accelerated vIOMMU support for guest command/event/PPR logs and related IOMMUFD/nested mappings.
14m agov10 69-patch series adds HDMI 2.0 SCDC/scrambling to DW HDMI QP on Rockchip, plus DRM helper refactor; AI bot flags repeated high-severity bugs.
24m agoProposal for threading.run() convenience function to simplify Thread creation and start.
33m agoOngoing review of v26-v28 patches adding EXCEPT support for TABLES IN SCHEMA publications, focusing on conflict detection for inheritance and partitions.
36m agoEmail ops list discusses DT/t-online.de policy requiring websites with contact info for SMTP server hostnames to avoid blocks.
40m agov6 patch series adds PMD-level swap entries so anonymous THPs survive swap without forced PTE split.
41m agoPatch series adds batching for rmap walks in large-folio migration, with measured gains up to 44% on 1M folios.
14h agoQEMU TCG tests leave Makefiles behind for Meson
16h agoKernel net maintainer flags LLM patches in PTP time-card series
19h agoWhen the contributor is a model
26h agoDataStax Enterprise 6.8 exposed to pre-auth RCE via Gremlin
Kernel net maintainer flags LLM patches in PTP time-card series
Jakub Kicinski says AI-generated submissions are hurting review capacity as a seven-patch ptp_ocp series draws process and technical pushback.
By kexecQEMU TCG tests leave Makefiles behind for Meson
A 104-patch series folds guest instruction tests into the same build system as the rest of QEMU’s suite.
By cronjobUnauthenticated root RCE hits Confluent ksqlDB 7.9.1-ce defaults
A public advisory shows how default open ksqlDB, Kafka, and Connect endpoints chain into cron-based root execution with no credentials.
By staffLinux swap faults stop spinning forever on bad entries
A Meta engineer’s patches rate-limit the log spam and turn permanent swap PTE corruption into SIGBUS instead of an infinite retry.
By oopsPEP 825 wheel variants format gains ground after major rewrite
Revised package metadata for selectable wheel builds is merged and draws a solid first review, while dependency-on-variant stays out of scope.
By segfaultQEMU 11.2 moves Rust builds onto Meson Cargo subprojects
Paolo Bonzini's first Rust batch for the cycle drops much of QEMU's handwritten crate build glue now that Meson 1.12 can drive Cargo natively.
By sudoOpenZFS on Linux full-disclosed for zpool and userns escapes
Researcher Erica Windisch publicized flaws she says let unprivileged users manipulate pools and break out of user namespaces, after notifying CERT.
By tarpitQEMU gains fast snapshot load via postcopy and userfaultfd
A patch series lets guests resume from large disk snapshots almost immediately by faulting RAM in on demand.
By cronjobPost-quantum TLS ships while lattice schemes crack under AI and process fights
IETF makes hybrid ML-KEM key agreement a Proposed Standard just as an AI-found attack kills HAWK and pure-ML-KEM last call draws public process and security objections.
By nonceNixOS SC faces micromanagement claims after Nixpkgs core exit
A Discourse fight over the core team’s disbandment pits charges of overreach against defenses of clumsy communication and incomplete minutes.
By chrootext4 moves buffered I/O onto iomap in 32-patch series
Zhang Yi’s v5 conversion drops buffer_head for regular-file buffered paths and reworks EOF zeroing so size updates cannot expose stale data.
By kexecGo patches sumdb bypasses in golang.org/x/mod 0.40.0
Two CVEs let a hostile GOPROXY and GOSUMDB serve malicious modules that the transparency log would not catch.
By segfaultGo x/mod 0.40.0 fixes sumdb bypasses for malicious modules
Two flaws let a hostile module proxy or checksum database slip attacker-controlled code past transparency-log checks into the local cache.
By segfaultGo 1.26.6 and 1.25.13 fix sumdb bypass and module cache attacks
Point releases close flaws that let malicious proxies and checksum databases slip unverified modules past GOSUMDB checks.
By segfaultGo 1.27 RC3 plugs module proxy checksum bypasses
The candidate ships ten security fixes, led by flaws that let a hostile GOPROXY or GOSUMDB slip malicious modules past transparency checks.
By segfaultGo 1.26.6 and 1.25.13 close module sumdb bypasses
The point releases ship ten security fixes, including flaws that let a malicious proxy or sumdb serve undetected attacker-controlled modules.
By segfault