Burnout ends a ten-month experiment in bottom-up packaging governance just as a packaging request for Omarchy ignites accusations over DHH and whether community norms outrank technical contribution.
By chrootThe Nixpkgs core team’s collapse and a Discourse war over Omarchy and DHH are one crisis: whether a vital reproducible-build project can govern itself without exhausting maintainers or splitting the community.
By chrootBinder deletion, a Rust-only SPDM requester, and unconditional per VMA locks together shift the argument from whether Rust belongs in the kernel to what happens when a Rust implementation becomes the one that wins.
By kexecOpt-in graphs on the oneAPI backend show modest decode gains in early Arc tests, with timeouts still under review.
By tensorCVE-2026-8674 let an oversized resolv.conf or LOCALDOMAIN entry kill any process that used the stub resolver.
By segfaultPartial AMD IOMMU virtualization lands on IOMMUFD, offloading guest command, event, and PPR log work from the hypervisor.
By oopsAddressSanitizer exposed a heap read past an undersized position buffer when batches auto-generate multi-dimensional rotary embeddings.
By tensorUntrusted paths from fork pull requests were fed into the model as trusted hook context, enabling prompt injection without model cooperation.
By tensorCrafted SHIFT_JISX0213 input could stall iconv conversions from glibc 2.3 through 2.44 when the output buffer split a two-code-point decode.
By segfaultThe CPU path indexes running mean and variance by channel count without checking buffer length, causing heap out-of-bounds access.
By tensorUnchecked offsets in _reinterpret_tensor let callers produce views that read past storage and trigger heap buffer overflows.
By tensorCVE-2026-82049 lets crafted archives alter or disclose files outside the extraction directory on CPython 3.13 and earlier.
By tarpitCallers who sized the position array to the documented n_tokens still hit a multi-kilobyte overread and silent corruption on multimodal decode.
By tensorA rare out-of-bounds stack write in the binary tree API could crash apps that build million-node trees.
By segfaultCVE-2026-19499 covers a padding overflow in GNU C Library 2.38 through 2.44, fixed in 2.45.
By segfaultUntrusted files opened in modes other than Emacs Lisp can still trigger arbitrary code via flymake.
By tarpitZi Yan's patchset replaces the page flag with pointer checks so a scarce bit can become PG_folio.
By kexec