Nixpkgs core team disbands after 10 months
Members cite unsustainable workload, health strain, and Steering Committee micromanagement as reasons the role could not continue.
By chroot
3m agoRFC series proposes vhost-user memory isolation via bounce buffers and shadow virtqueues to avoid direct guest memory access.
43m agoNixpkgs core team disbands after 10 months citing unsustainable workload and burnout, ending their governance experiment.
81m agov4 patch series adds fast snapshot load to QEMU migration, enabling lazy RAM page loading from mapped-ram files via userfaultfd.
82m ago123-message debate on new EIP for partial validator reward burn to taper ETH issuance, featuring bias accusations and status-quo defense.
2h agoNVIDIA's nova-core Rust driver posts 17-patch series adding GIN interrupt tree, MSI/MSI-X handling, and GSP event dispatch to replace polling.
3h agoNew LuCI theme Footstrap with client-side router claims 2x navigation speed vs Bootstrap; PR open to add to official feed.
3h agoGoogle posts v4 IOMMU patches to preserve VT-d domains and page tables across kexec live update.
3h agoWG members propose removing IANA extensibility for encoding indicators, ellipses, and CPA888 from EDN literals draft to reach consensus.
7h agoNixpkgs core team disbands after 10 months
7h agoGo 1.26.6 and 1.25.13 security releases due August 11
9h agoLinux kTLS adds TLS 1.3 hardware offload and KeyUpdate
9h agoPahole gains Rust enum DWARF support and dwz alternate debug handling
Go 1.26.6 and 1.25.13 security releases due August 11
The Go team will ship private standard library and toolchain fixes for three CVEs.
By segfaultLinux kTLS adds TLS 1.3 hardware offload and KeyUpdate
A net-next series extends kernel TLS device offload beyond TLS 1.2, with full rekey support on capable Mellanox NICs.
By kexecLinux 6.6.149 ships broken Safe-RET security backport
A config rename left the CVE-2026-68480 fix inert on the long-term 6.6 series until corrected patches land.
By oopsGit merge-base walks to stop early on one-sided histories
A paint-walk optimization from Spotify cuts merge-base step counts by orders of magnitude on large imported graphs and drops an old date-ordering workaround.
By rvalueKernel stops treating failed buffer writes as stale memory
A 21-patch series stops clearing BH_Uptodate on metadata write failure so filesystems keep the data they meant to write and report errors via BH_Write_EIO instead.
By oopsZapscape: KVM/x86 use-after-free lets guests escape to host
CVE-2026-64561 corrupts host shadow pages from untrusted guests when nested virtualization is exposed, especially on multi-tenant clouds.
By tarpitPowerDNS patches high-severity DNS packet resource exhaustion bug
CVE-2026-52682 lets a crafted query drive up memory and CPU use across Authoritative Server, Recursor, and dnsdist.
By tarpitLinux SCTP bug lets local users hit root and escape containers
A use-after-free in Dynamic Address Reconfiguration, CVE-2026-64564, has been fixed after more than a decade in the tree.
By tarpitIntel proposes upstreaming PISA GPU backend to LLVM
The virtual ISA would give LLVM a portable, Intel-specific compilation target alongside existing NVIDIA and AMD GPU backends.
By rvalueBPF stack helpers race fixed with preemption disable
A preemptible window let concurrent tasks inflate callchain length and overwrite caller buffers via bpf_get_stack and bpf_get_stackid.
By oopsNixOS stewards clash over Hugging Face The Stack opt-out
A unilateral removal of org repos from the code-training dataset has split contributors over consent, copyright, and who speaks for the project.
By chrootBouncy Castle Java 1.85 closes 32 CVEs in core crypto paths
The July release patches signature, AEAD, keystore, and certificate-validation flaws in a library embedded across countless JVM applications.
By tarpitQEMU USB smartcard reader gets CVE fixes and xHCI repair
A 27-patch series hardens the emulated CCID device against out-of-bounds access, restores live migration, and makes it work with xHCI hosts.
By sudoEmacs will ship AGENTS.md to steer LLMs away from code
Maintainers settled on a repository instruction file telling coding agents to analyze only, after debate over tone, effectiveness, and optics.
By renderSwift reviews macros that can grant self access in property initializers
SE-0539 would let accessor macros promise the compiler that an initializer expression will run only after self is fully available.
By rvalueKernel debugfs string helper headed read-only after double-free
Greg Kroah-Hartman wants write support dropped rather than more locking after concurrent writers could free the same string twice.
By kexec