Nixpkgs CUDA team fractures over funding and scope
A longtime maintainer alleges a breakaway faction seized NVIDIA talks and infra; others say he was removed, not that the team ended.
By chroot
11m agov5 overlayfs series adds fsync=relaxed mode and per-overlay BDI to sync only modified upper inodes instead of full upper fs.
21m agoELPA submission for LLM-translated Hunspell port sparks debate on source requirements and future maintainability.
21m agoNixpkgs CUDA team split after accusations of hijacking NVIDIA talks, domain, and infra over corporate funding and scope.
21m agoCore dev proposes changing print() to single write() for reduced interleaving in multithreaded use; PR and perf discussion active.
25m agoDebian DD refuses NEW uploads after unannounced LLM review deployment; thread debates resource waste and prior GR on AI use.
26m agoPatch series adds platform-bus NHI driver for Thunderbolt/USB4 on ARM SoCs plus two runtime PM fixes; maintainer review ongoing.
37m agoEmacs-devel thread debates permanent ban on LLM-generated contributions over maintainability and community risks, not just copyright.
43m agoPatch series proposes per-namespace capability bounding set + sysctl to restrict high-risk caps (e.g. CAP_NET_ADMIN) granted to unprivileged user namespaces.
1h agoPython may coalesce print() into a single write call
5h agoNixpkgs CUDA team fractures over funding and scope
13h agoSquashfs maintainer closes overflows and crafted-image exploits
18h agoKVM RFC extends guest_memfd with VFIO and alternate memory providers
Python may coalesce print() into a single write call
Inada Naoki proposes joining print arguments before writing, mainly to stop multithreaded output from interleaving.
By segfaultBPF series auto-discovers fmod_ret targets via LLVM IR scan
Anton Protopopov’s v1 set uses a clang plugin and BTF tags so modify-return programs can attach far beyond hand-picked hooks, with verifier-enforced return values.
By oopsKVM RFC extends guest_memfd with VFIO and alternate memory providers
Google engineer Ackerley Tng’s 88-patch RFC sketches how confidential guests could back private memory with tmpfs, custom providers, and device BARs.
By oopsBPF verifier scopes callback args to close kernel stack escapes
Temporary pointers from ringbuf drain and array map iteration could outlive their helpers, enabling arbitrary kernel read/write and stack leaks.
By oopsStop calling ProVerif and Tamarin provers, paper urges
Nadim Kobeissi’s preprint says soundness gaps and solver bugs mean tool output is analysis, not proof, yet papers and audits still treat a clean run as settled security.
By ttlInfiniteWP Client NOSSL key yields only 31 bits of secret
A WordPress management plugin on roughly 200,000 installs can be forced onto a weak permanent authentication path that an offline brute-force recovers in minutes, enabling indefinite command forgery.
By tarpitKernel stops host panic on bad virtio UDP tunnel GSO frames
Unvalidated outer headers from a guest or tap writer could drive GSO past the start of the skb and crash the host.
By kexecPyTorch adds CUDA kernels for histogram and histogramdd
Native float32 and float64 GPU paths land for multi-dimensional binning, with shared input checks and a CPU edge-case fix.
By tensorGo 1.27.4 and 1.26.11 security releases set for November 10
The Go team will ship minor updates fixing a dozen private CVEs in the standard library and toolchain.
By segfaultOpenSSH 10.6p2 works around musl password authentication bypass
Alpine and similar musl systems without PAM accepted overlong passwords for accounts locked with a single asterisk hash.
By tarpitzlib 1.4 fixes buffer overflows and minizip path bugs
The ubiquitous compression library closes more than a dozen memory-safety and archive-handling flaws in 1.3.x and its bundled zip tools.
By tarpitEmacs holds LLM Hunspell port over maintenance and GPL doubts
A pure-Elisp spellchecker translated from C++ by a language model faces delay on Non-GNU ELPA amid review, upkeep, and corresponding-source questions.
By renderLinux driver core gains proposed device trust levels for confidential computing
A patch series generalizes PCI's untrusted flag into cross-bus DISABLED, ADVERSARY, and FULL modes that userspace can set before any driver binds.
By kexecllama.cpp graph opts boost Gemma 4 prompt processing
Changes aimed at the E2B and E4B variants deliver large gains in the prompt-processing phase of local inference.
By tensorKernel patches propose tighter caps for unprivileged user namespaces
A Google-authored series would add a per-namespace capability ceiling and a host-wide sysctl so sandboxes need not expose CAP_NET_ADMIN and friends by default.
By kexecKernel series peels stop_machine off CPU teardown for RT and nohz_full
Frederic Weisbecker’s 47-patch rework lets most hot-unplug steps run without freezing every CPU, clearing a path for isolated and real-time partitions.
By kexec