Linus Torvalds NAKs SCTP sysctl rewrite over unreadable macros
Alexey Gladkov’s RFC to replace per-namespace table cloning with sysctl_field descriptors is rejected as visually illegible, type-unsafe noise.
By oops
11m agoPatch adds invalidate_lock to all ntfs fallocate modes to close mmap read race exposing unzeroed clusters.
14m agoGreg KH reports that a HID ft260 stack-use-after-return fix (with several dependent security patches) fails to apply to 5.15-stable.
20m agov10 of 41-patch series adding in-place private<->shared conversion to KVM guest_memfd for CoCo VMs.
25m agoPEP 843 proposes new 'export' syntax to deduplicate re-exports and __all__ updates in hub modules.
28m agoActive discussion of new PEP 805 proposing runtime-checked safe parallelism for CPython, building on PEP 703 and 734.
41m agoBug report and fix discussion for row filter in logical replication turning unchanged toasted columns into NULL on subscriber.
48m agoDraft proposal for ZK confidential agent policy verdicts; thread refines programKey to support off-chain verifiers via policy_commitment hashes.
52m agoEthereum Magicians thread refines ERC draft for single-use ZK-nullified agent credentials, clarifying security scope, nullifier layout and Guard interface.
2h agoLinus Torvalds NAKs SCTP sysctl rewrite over unreadable macros
2h agoNixpkgs contributors push to ban LLM text outside code
2h agoPostgreSQL 19 features face revert debate after LLM bug tally
4h agoVim patches out-of-bounds write in bundled libvterm resize handling
PostgreSQL 19 features face revert debate after LLM bug tally
Haas flags foreign-key batching, REPACK, and online checksums as post-freeze risk areas; Gustafsson offers a checksums revert while others urge caution.
By sudoNixpkgs contributors push to ban LLM text outside code
Multi-hundred-word pull requests revive the fight over extractive AI contributions and who bears the cost of review.
By chrootRust DRM driver aims to free DisplayLink DL3 docks from proprietary stack
Mike Lothian’s Vino series targets three dock generations as ordinary KMS devices, after earlier revisions never lit a panel.
By renderFFmpeg adds H.264 MVC decoding for Blu-ray 3D multiview
Dom Cobley's series brings Annex H stereo streams to h264dec with the same view selection interface already used for MV-HEVC.
By renderKernel patches close UDP port side channel in routing caches
Always creating exceptions for ICMP errors stops off-path attackers from probing connected UDP sockets after earlier defenses were bypassed.
By kexecQEMU migration pull adds fast snapshot load and RDMA hardening
The update also closes CVE-2026-6426, tightens vmstate allocation checks, and fixes a vhost-user postcopy hang.
By sudoQEMU hardens IDE and AHCI against migration and unplug bugs
Denis V. Lunev’s IDE series closes host memory corruption paths and fixes CHS geometry handling that could crash or mislead guests.
By sudoIPQ5018 NSS offload works on upstream stmmac at Linux 6.18
A public fork accelerates routed NAT on the GL.iNet GL-B3000 without Qualcomm’s proprietary datapath stack, leaving the CPU mostly idle.
By chrootTomcat rewrite [N] flag bug can bypass access controls
An off-by-one error in Apache Tomcat’s RewriteValve restarts rule processing at the wrong point, undermining access checks that depend on rewrite order.
By tarpitTomcat security constraint bypass fixed as CVE-2026-65182
Path ordering could let requests slip past more restrictive access rules on shorter prefixes.
By tarpitGit 3.0 may accept only lowercase hex object IDs
An RFC series would stop parsing uppercase so Git matches what it emits and what most tooling already assumes.
By segfaultOpenRGB root daemon allows trivial remote compromise
Flaws in the RGB control suite’s custom network protocol can fully take over systems when the server runs with default privileges.
By tarpitBPF series adds dedicated signing keyring and ML-DSA support
Daniel Borkmann's v2 patches give operators a BPF-scoped trust root for signed program loads and teach bpftool post-quantum signatures.
By oopsLinux virtual swap decouples zswap pages from disk slots
Nhat Pham's v4 series adds a persistent virtual swap device so compressed and zero-filled pages no longer reserve physical swap capacity.
By oopsGit maintainers debate DCO validity for AI-generated patches
A Gemini-produced migration off the removed POSIX utime() API stalled when a developer refused to review it over uncertain origin certification.
By segfaultWIMSE moves to adopt AI agent auth framework draft
IETF workload identity group finds broad support for AIMS as a starting point, with multi-hop delegation and revocation left as open work.
By ttl