Nixpkgs core team exits as packaging megaprojects hit the burnout wall
A ten-month experiment in consensus leadership ends in attrition, while store rewrites and other distro policy fights expose the same unpaid-authority gap.
By chroot
18m agoPatch series proposes making git-blame default to HEAD:.git-blame-ignore-revs, adds parser hardening; marked ready for 'next'.
45m agoPatch series adds V4L2 subdev streams API support to qcom camss, with linking and SC7280 enablement fixes.
50m agoNix gitlab: flake fetcher hitting Cloudflare 403 on /repository/commits endpoint; PR switches to single-commit endpoint as fix.
53m agoLong-running Qualcommax NSS build thread sees new PR adding EEE support for 2.5G/10G ports after reports of link and traffic failures.
1h agoPatch v5 for logical decoding bug #19555 (DDL+subxact tuplecid assert) under review for backport to all stables.
2h agoRFC proposes adding Chromium C++ TUs to LLVM CTMark; discussion weighs cost, modernity, and smaller alternatives like mp-units.
2h agoRFC proposes adding CIR to Clang/MLIR pre-merge CI while keeping peripheral tier status; debate centers on support burden and policy implications.
2h agoClang area team accepts RFC to enable ClangIR (and MLIR) build by default; -DCLANG_ENABLE_CIR=Off remains supported.
23h agoPyTorch CPU triu/tril write out of bounds on strided batch out
24h agoKernel isolates skb data allocations against UAF heap sprays
28h agoIETF last call rejects mandatory ops sections in RFCs
33h agoCPython eyes UTF-8 as default internal string storage
Kernel isolates skb data allocations against UAF heap sprays
Kees Cook’s kmem_buckets series, capped by a Pedro Falcato networking change, gives socket-buffer payloads their own slab caches when slab buckets are enabled.
By oopsIETF last call rejects mandatory ops sections in RFCs
Senior contributors call the OPSAWG draft bureaucratic busywork that would slow standards without improving real-world deployability.
By ttlPyTorch CPU triu/tril write out of bounds on strided batch out
Non-contiguous batch dimensions on the out tensor make the CPU path step wrong and can corrupt the heap; CUDA is fine.
By tensorExt4 buffered I/O moves to iomap in large opt-in series
Zhang Yi’s 31-patch v7 lands the core conversion and a new disksize-pending scheme, still off by default until more features catch up.
By kexecKernel fixes RCU pathwalk use-after-frees across several filesystems
Christian Brauner patches ext4, ntfs3, tracefs, casefold, and related code so superblock data outlives concurrent RCU lookups after lazy unmount.
By oopsCyrus SASL left with unfixed flaws and no active maintainers
Oracle engineer flags multiple open security issues after years without a release.
By tarpitKernel fix blocks UAF in lazyfree huge-page reclaim race
An unprivileged race of MREMAP_DONTUNMAP against transparent huge page discard could free anon_vma structures still referenced by a restored mapping.
By kexecLinux netdev adds fwnode PCS provider API for external serdes
Christian Marangi’s series gives phylink a producer-consumer model for Physical Coding Sublayer devices and lands first support on Airoha AN7581.
By kexecOpenJPEG leaves heap overflow in all releases as project goes idle
A February 2026 fix never shipped; 2.5.3 and 2.5.4 remain vulnerable in distros and PDF toolchains, with no CVE.
By tarpitLinux watch queue race lets unprivileged users panic the kernel
A fix makes sizing of key-notification pipes atomic so concurrent posters cannot hit a null buffer and crash the system.
By kexecSPARC64 gains Linux seccomp filter support
The architecture was one of the last without the BPF sandboxing Docker, systemd, and Flatpak rely on.
By kexecOpenStack Mistral flaws allow cross-project writes and host RCE
Four CVEs in the workflow service let authenticated users rewrite other projects' resources, extend private workflow shares, and run code on executor hosts.
By nonceBPF adds unwind landing pads for resource cleanup
Kernel support for compiler-emitted cleanup tables would let bpf_unwind() run Drop-style release instead of discarding frames.
By oopsPyTorch CUDA pool teardown can re-enter half-destroyed state
Review of pending allocator work also flags null returns that can produce CUDA tensors backed by address zero.
By tensorKernel pin-init adds safe sibling-field self-references
Gary Guo’s series lets pinned Rust structs borrow between fields without allocation, landing advanced variance tools under a tight-use agreement.
By kexecGo patches HTTP/2 CPU spike from SETTINGS window updates
CVE-2026-78669 let a malicious peer burn CPU with many streams and repeated initial window size changes.
By segfault