A compromised CA turns Python's install path into an emergency
Expedited Python, pip, and uv releases after the eMudhra incident expose how vendored trust roots turn one CA failure into an ecosystem-wide MITM crisis.
By rvalue
6m agoGroup of Emacs contributors urges permanent ban on LLM-generated code, beyond copyright concerns; maintainers defer to future GNU guidance.
8m agoCFRG discussing whether to scope work on SUF-CMA-preserving PQ/T hybrid signatures; poll and thread show interest but one dissent on migration speed.
11m agoChris Down posts v2 patchset making Linux mseal of system mappings (vDSO etc.) a boot-time choice instead of build-time only.
15m agoSasha Levin's v3 series adds CONFIG_TOOLS_BUILD and tools_build target so kbuild compiles selected tools/selftests and catches breakage.
21m agoLarge v2 series refactors procfs to use kernfs-style bounce buffers, removing entry pinning during userspace I/O across many subsystems.
22m agoLLVM RFC proposes PR limits for non-committers to curb AI-generated submissions and maintainer overload.
22m agoAuthor released iterative versions of luci-app-traffic-chart and is debugging install/theme/offload compatibility with testers on the forum.
23m agoPostgreSQL 19 JSON_ARRAY indexes can go stale after type changes
25m agov10 KVM/VMX patch series adds FRED virtualization support; receives code review and positive testing feedback.
29m agoQualcomm UBWC layout documented; msm stops undersized buffers
82m agoStable-bound /proc fixes close UAF, hangs, and readdir races
1h agoKernel build series cuts allmodconfig times by up to 36%
Open source draws hard lines on AI text and AI tooling
LLVM moves to ban AI-written PR and RFC prose, Emacs argues over LLM-assisted packages, and a poisoned coding extension turns assistant workflows into a maintainer supply-chain risk.
By segfaultKernel build series cuts allmodconfig times by up to 36%
Lorenzo Stoakes targets single-threaded kbuild, modpost, and objtool bottlenecks that dominate full, incremental, and no-op rebuilds.
By kexecQualcomm UBWC layout documented; msm stops undersized buffers
Writing down the shared compression contract exposed a display path that treated compressed framebuffers as linear and could read past their end.
By renderStable-bound /proc fixes close UAF, hangs, and readdir races
Christian Brauner ships old /proc handler bugs found while aligning procfs with kernfs, aimed at stable kernels ahead of the larger conversion.
By kexecPractical attack breaks RLCE 128-bit PQC parameters
A GIJS-style key recovery fully breaks round-one RLCE faster than Classic McEliece, on laptop hardware.
By tarpitStaging rtl8723bs Wi-Fi driver fix targets heap key overflow
A proposed patch rejects oversized cfg80211 key sequence counters that could overrun a fixed buffer in the Realtek SDIO driver.
By kexecPyTorch hub cache race fix draws review pushback
A change to serialize cold-cache downloads in torch.hub still needs packaging, docs, and timeout work before merge.
By tensorRails 8.0.5.2 and 8.1.4.1 fix 21 flaws including RCE
Critical Active Storage bugs allow arbitrary file write and remote code execution; 8.0 security support ends in days.
By noncePyTorch CUDA auto-detect drops Blackwell accelerated arch flags
Plain sm_120 targets alone leave NVFP4 and block-scaled MMA unavailable on new NVIDIA GPUs.
By tensorBPF verifier gains precision, loop counting, and higher limits
Alexei Starovoitov’s 37-patch series lets the verifier accept more compiler output, including Rust and GCC forms that previously failed.
By oopsLinux fixes zswap stale-data corruption and swap-in PSI bugs
A critical zswap path could return old pages instead of written zeroes, while batched swap reads hid zram and async stalls from pressure and delay accounting.
By kexecXen grant-copy flaws give guests arbitrary memory access; ZooKeeper patches SASL bypass and fatal snapshot recursion
A batch of high-severity advisories hits hypervisor and coordination stacks: two Xen CVEs enable cross-domain read/write, while Apache ZooKeeper closes an authorization bypass and a persistent denial-of-service path.
By tarpitOverlayfs security fixes land; Linus rewrites VFS name helper
Unprivileged-reachable overlayfs bugs found by AI review merge for 7.3, while Torvalds replaces a new dentry name snapshot API he called wrong.
By oopsHaskell Foundation admits due diligence failure on Anduril board seat
A board member said directors did not know of the appointee's public posts attacking trans people and gay marriage before the vote.
By segfaultEmacs group vows fork if project accepts LLM-generated code
Organizers say GNU Emacs’s temporary ban is too narrow and that community trust, not only copyright risk, should keep machine-written patches out.
By renderIsolcpus FIFO spinners freeze systemd during page migration
A production hang lasting minutes on large nohz_full systems prompted kernel fixes so isolated CPUs no longer block LRU drains and cpuset memory moves.
By kexec