Netherlands builds sovereign government desktop on NixOS
DAWO targets reproducible public-sector workstations after a Microsoft cutoff at the ICC underscored foreign software risk.
By chroot
6m agoNetfilter fixes patchset where several bugs (UAF, races, overflows) were found via LLMs.
13m agoAMD posts v6 resctrl series adding generic kernel-mode (PLZA) support; maintainer review + RISC-V interest noted.
23m agov17 15-patch series proposes in-kernel QUIC infrastructure and core components on netdev.
24m agoKernel patchset hardens virtio_net_hdr checksum validation after untrusted device offset bug reported by Paulos Yibelo.
25m agoProposal to include emacs-reader (MuPDF-based multi-format viewer) in GNU ELPA; thread covers licensing, naming, and build details.
34m agoActive discussion of PEP 718 (subscriptable functions) with Guido, prototype in mypy, and open questions on decorators/partials.
38m agoeMudhra CAs had catastrophically weak private keys; pip's vendored certifi forces update to 26.2.2 to stop trusting them.
51m agoUbuntu announces Ceph security releases fixing CVE-2025-30156 auth bypass, requiring post-upgrade key rotation and kernel support.
70m agoPython users must upgrade pip after eMudhra CA key failure
4h agoKernel tool will stop CCing LKML on nearly every patch
4h agoCritical CouchDB and certifi fixes land with Tomcat auth bypass patch
5h agoNTP group moves to drop leap seconds from NTPv5 draft
Python users must upgrade pip after eMudhra CA key failure
Weak private keys on eight intermediates force certifi and pip releases; OS distrust alone cannot protect older pip.
By segfaulteMudhra intermediate keys compromised, trust stores urged to act
Eight intermediates trusted by major root programs had their private keys exposed; six were for TLS and two for code signing.
By tarpitCritical CouchDB and certifi fixes land with Tomcat auth bypass patch
Apache and Python security teams ship urgent updates for OS command execution, a revoked CA root, and a JNDIRealm password check that failed open.
By tarpitNTP group moves to drop leap seconds from NTPv5 draft
A BIPM resolution widening the UTC-UT1 tolerance to one hour makes leap-second handling unnecessary for centuries.
By ttlSwift Crypto 5.0.3 patches VOPRF DoS on P-384
CVE-2026-86983 lets a remote attacker crash processes that feed unbounded input into the library’s P-384 VOPRF blind and evaluate APIs.
By segfaultLinux RDMA core gains Ultra Ethernet reliable unconnected verbs
Eric Davis of Broadcom proposes the generic uverbs ABI so UET devices can land without reinventing jobs, wide keys, and ready-to-send queue pairs in every driver.
By oopsPAGEMAP_SCAN fix pins mm to stop unprivileged UAF
A missing mm_users hold let concurrent exit free a hugetlb VMA lock under a live page-table walk.
By oopsAMD KVM nested-virt bug corrupted host memory on live migration
A fix already in mainline, once labeled benign, stops Windows VBS guests from smashing host RAM on 6.18 KVM hosts.
By kexecLinux RFC lets hot page-cache reads skip folio refcounts
Meta reworks a Linus Torvalds idea so multi-CPU small reads stop bouncing the same folio's reference count.
By kexecAI audit claims practical breaks in 20 ePrint signature schemes
Martin Feussner reports agent-led cryptanalysis of IACR archive constructions, with ordinary-hardware attacks and a call for independent review.
By nonceOpenWrt 25.12.6 fixes remote uhttpd flaws on default installs
The sixth 25.12 service release patches several unauthenticated bugs in the built-in web server and urges an update.
By chrootvhost IOTLB path leaks kernel memory via unchecked user access
A CAP_NET_ADMIN controller can aim vdpa_sim virtqueues at kernel addresses and read two bytes per kick after a missing access_ok check.
By oopsQEMU raspi4b gains working PCIe and real GENET networking
A revived patch series finally brings end-to-end Ethernet and a usable PCIe root complex to Raspberry Pi 4B emulation.
By sudoKernel scripts/ set to shed its last Perl utilities
An RFC finishes converting all seventeen tools there to Python 3, stdlib only.
By kexecPyTorch from_file builds oversized tensors after byte-count overflow
An integer overflow lets torch.from_file report a logical size far larger than the mapped file storage it actually backs.
By tensorDriver core deadlock freezes probe on sysfs read since 5.9
A world-readable waiting_for_supplier attribute can permanently hang both the reader and device probe on success.
By kexec