render
Desktop & Graphics desk
VS Code 1.136.2 fixes RCE via remote agent host settings
Malicious workspace settings in untrusted repos could authorize a remote agent and expose local files.
VS Code 1.136.2 fixes Copilot Chat ADO token exfiltration
A malicious workspace could redirect Azure DevOps code search traffic and the user's bearer token to an attacker-controlled host.
DRM switches dma_resv to refcounting, fixes i915 busy hang
Christian König’s third dma_resv series replaces embedded reservation objects with dynamic allocation across the graphics stack and closes an infinite-loop bug in i915.
Machine authors, machine principals, and no shared FOSS rule
RMS-era ELPA provenance fights and the WIMSE push to adopt AI-agent auth drafts are one problem seen from opposite ends: FOSS still has no common norms for synthetic code or for agents as delegatable identities.
Signed-off-by meets the model: projects split on LLM patches
Emacs package review and a Git treewide migration have forced the same unresolved fight into the open: whether AI-assisted code can carry a meaningful DCO, must be labeled, or should be refused as routine practice arrives.
RMS: GNU ELPA must reject LLM-generated packages
A Magit-style Sapling client for Emacs triggers a policy fight over AI code and package maintenance.
DRM series moves dma_resv to refcounted dynamic allocs
Christian König proposes dropping embedded reservation objects across GEM, TTM, and drivers, with Claude-assisted patches and automated review already flagging serious leaks.
Rust DRM driver aims to free DisplayLink DL3 docks from proprietary stack
Mike Lothian’s Vino series targets three dock generations as ordinary KMS devices, after earlier revisions never lit a panel.
FFmpeg adds H.264 MVC decoding for Blu-ray 3D multiview
Dom Cobley's series brings Annex H stereo streams to h264dec with the same view selection interface already used for MV-HEVC.
VS Code 1.132.1 patches Fetch Web Page RCE
CVE-2026-59113 let a crafted page drive OS protocol handlers and premature extension URL overrides when users fetched untrusted content.
Hermes LLM agent bid for NonGNU ELPA sparks SaaSS fight
An Emacs frontend for a free agent harness draws fire over install defaults that steer users toward commercial model APIs.
Rust DRM fix stops crash when modules unload with devices open
Missing file_operations ownership in Rust DRM and misc helpers let the kernel call into unloaded code after rmmod.
Virtio RFC proposes device-owned queue memory for isolation
Alexander Graf’s Device Memory Buffer feature would confine each virtio device to a shared region it owns, instead of ordinary guest RAM.
Emacs will ship AGENTS.md to steer LLMs away from code
Maintainers settled on a repository instruction file telling coding agents to analyze only, after debate over tone, effectiveness, and optics.
DRM series adds HDMI 2.0 scrambling for Rockchip DW HDMI QP
Collabora patches target 4K at 60 Hz on RK3576 and RK3588 and refactor how HDMI connectors declare their capabilities.
Emacs 31 blockers listed as file-open RCE sparks release fight
Coordinators want a release candidate soon, but developers say shipping another major version with a known arbitrary code execution hole would be reckless.
Emacs master rewritten to drop commit with LLM authorship
Savannah maintainers force-reset the branch after a commit unintentionally credited Claude, leaving local clones needing a rebase or hard reset.
Emacs master gains Claude co-authored commit despite GNU ban
Maintainers move to revert after a contributor credited an LLM on a non-trivial change, flouting the interim no-LLM policy.
MSM DRM gains msm_display interface to untangle backends
A 24-patch series replaces type-specific DSI, DP, and HDMI helpers and cached connectors with a shared callback interface and common connector setup.