Git rejects non-trivial AI patch, restates LLM contribution ban
Maintainers told a submitter that a claimed 15% blobless-clone speedup must be rewritten by hand without generated code.
By rvalue
11m agoIETF thread discusses draft on handling LLM text in standards discussions.
35m agoPEP 842 proposes runtime __export__ for module visibility; active design discussion includes Guido.
47m agos390 KVM v5 series adds arm64 guest support via shared code extraction, build-time header/inc copying, and new SAE instruction.
48m agoV12 patch series proposes new standalone famfs filesystem for CXL-scale shared DAX memory appliances.
50m agoFedora plans shadow-stack enforcement in 2027, prompting manylinux hardening flag changes and raising PyPI wheel compatibility issues.
52m agoQEMU block layer PULL includes two CVE fixes for out-of-bounds accesses in dmg and other stability fixes.
59m agov5 patch series proposes kfree_rcu_nolock() and kvfree_rcu_head changes for slab/RCU on PREEMPT_RT and unknown contexts.
76m agoBPF verifier fixes plug refcount_acquire holes for borrowed kptrs
77m agoMaintainers debate v8 pghot hot-page promotion subsystem for CXL tiering vs DAMON and existing NUMA balancing.
10h agoGit rejects non-trivial AI patch, restates LLM contribution ban
17h agoPython debates PEP 842 module exports and public API boundaries
24h agoLinux usbio driver fixed for slab overflows and I2C hang
BPF verifier fixes plug refcount_acquire holes for borrowed kptrs
Two bugs let CAP_BPF programs feed NULL or stale pointers into refcount paths that could crash the kernel.
By kexecPython debates PEP 842 module exports and public API boundaries
A proposed __export__ list would warn on access to non-public names, but reviewers want clearer ergonomics, internal-use rules, and stronger signals than warnings alone.
By segfaultKVM nested SVM drops blanket TLB flushes with per-vCPU L2 ASIDs
Yosry Ahmed's series gives each nested guest its own ASID, matching VMX VPID practice and yielding 8-15% gains on recent AMD CPUs.
By kexecDRM series adds HDMI 2.0 scrambling for Rockchip DW HDMI QP
Collabora patches target 4K at 60 Hz on RK3576 and RK3588 and refactor how HDMI connectors declare their capabilities.
By renderGNOME cuts vuln embargo to 30 days, stops AI-ban forwards
Longtime security coordinator Michael Catanzaro will step down in November and is seeking a successor.
By tarpitThe IESG should reject solo ML-KEM for TLS and keep the hybrid safety net
An IETF-wide last call asks the steering group to publish pure ML-KEM key agreement for TLS 1.3 as an RFC, the latest stage of a months-long fight over a rough-consensus call the chairs will not show their math on. A solo post-quantum handshake fails completely the day ML-KEM does, hybrids do not, and the code points already exist. The IESG should reject it. Comments close 13 August.
By staff8250 serial console conversion to NBCON queued again after earlier revert
John Ogness's v11 series restores non-blocking console support for the widely used 8250 UART driver after underlying bugs blocked the first attempt.
By oopsPHP security releases fix SQL injection and out-of-bounds write
Four branches ship fixes for PostgreSQL injection, Phar crashes, libgd, and a BCMath flaw limited to newer lines.
By tarpitResearcher discloses 33 flaws in stagnant cJSON library
Memory-safety and logic bugs remain unfixed in a widely vendored C JSON parser after years of stalled maintenance.
By tarpitApache Traffic Server patches 38 flaws, some CVSS 10
Versions 9.2.15 and 10.1.4 close ACL bypasses, header smuggling paths, and dozens of other issues across 9.x and 10.x.
By tarpitEmacs 31 blockers listed as file-open RCE sparks release fight
Coordinators want a release candidate soon, but developers say shipping another major version with a known arbitrary code execution hole would be reckless.
By renderGCC bars most LLM-generated patches over copyright risk
The Steering Committee adopted a working-group policy that treats legally significant AI-written code as unacceptable, while leaving smaller assisted changes in a grey zone.
By segfaultQEMU patch series adds LLVM tool to auto-generate TCG from C helpers
helper-to-tcg turns annotated helper functions into TCG at build time, with Hexagon as the first large-scale frontend.
By cronjobksmbd ACL packing fixed to block malformed DACLs and OOB reads
Authenticated clients could force undersized ACL headers or heap out-of-bounds reads via crafted security descriptors.
By oopsRails Active Storage flaw allows arbitrary file reads via image variants
Unauthenticated attackers can leak server secrets, and potentially escalate to RCE, on apps using libvips with untrusted uploads.
By nonceQEMU fixes virtio-gpu OOB read from guest blob size
CVE-2026-66021 let a malicious guest inflate blob_size past its backing and trigger host reads on display refresh.
By sudo