freenode news
News from the places where open source, open standards and cryptocurrency development actually happen.
- Posts
- 94 from 10 Oct 2026 to 31 Oct 2026
- Posting
- weekly (94 in the last year)
- Kind
- magazine
- Feed
- https://freenode.net/feed.xml
2026 94
- Ubuntu LTS kernels still unfixed for critical CVE-2026-98432
- UCSI retry floods boot logs after USB merge for 7.4-rc1
- PyTorch adds system oneDNN option for CPU and XPU
- PyTorch locks down export load against unsafe operator names
- KVM nested VMX teardown can corrupt unrelated process memory
- QEMU fixes QED heap leak to guests (CVE-2026-118594)
- glibc gettext allows directory traversal via LANGUAGE
- When intermediate CAs fail, language stacks discover they own the blast radius
- BPF series adds sleepable kfuncs to map and write user memory
- SwiftPM pitch would allow multiple major package versions
- GLib plugs Windows app-launch argument injection flaw
- Projects draw hard lines as AI contributions eat reviewer time
- Claude Code VS Code extension on Open VSX drops RAT
- BPF verifier defers instruction patches to cut large-program load times
- Linux swap fixes close zswap corruption and cross-user data leak
- zram redesign splits read/write streams, cuts latency and RAM
- Suricata 8.0.8 fixes high-severity DoS and detection bypasses
- Linus rejects late SPARC pull, rebukes rebase date tricks
- Kernel series plugs allocator races with memory hotplug
- Kernel lib fixes target maple-tree crash and rhashtable deadlock
- Kernel stops filesystems flipping read-only behind the VFS
- OpenStack keystonemiddleware bypasses access_rules via service token
- Kernel RFC fixes inode reclaim hang on ext2, FAT and kin
- Swift pitch adds single-yield functions beyond accessors
- DRM adds atomic state readout for firmware-lit displays
- Kernel series forces kobject release callbacks, plugs UAFs
- glibc adds system-wide loader hardening tunables
- Apache Kafka patches JWT bypass, secret reads, and pre-auth memory DoS
- Canonical restarts Ubuntu Core Desktop with dedicated team
- EDK II PXE flaw enables pre-boot remote code execution
- llama.cpp skips draft probability floor for faster MTP and DFlash2
- Swift pitch: send and @oneway for fire-and-forget actor calls
- PyTorch prototypes AOTI registration for DSL kernels via TVM-FFI
- BPF verifier fix stops bogus packet reads after loop widening
- Linux RFC proposes common attestation API and TDX provider
- No shared playbook: FOSS projects diverge on policing AI patches and prose
- Linus rejects media Kconfig change exposing chip driver prompts
- Debian developers balk at unannounced LLM reviews in NEW queue
- Landlock gains separate rights for file metadata access
- Race found in Linux HugeTLB vmemmap optimization path
- Git aims to stop fetching every branch in shallow clones
- Kernel mmb warning exposes ext4 xattr and FAT buffer bugs
- Kernel mm series piles on userfaultfd, MGLRU and memfd fixes
- Rust SPDM requester proposed for Linux device authentication
- llama.cpp auto thread count now prefers physical cores
- Godot 4.x runs attacker GDScript from crafted .po translations
- Kernel fix stops /proc maps from skipping live VMAs under load
- Two-decade IPv6 MTU bug can panic Linux with one sendmsg
- DMA-buf gains mapping types beyond scatterlist
- tmpfs fixes close F_SEAL_EXEC bypass and truncation hangs
- Linux proxy execution series adds sleeping-owner handling
- Python issues expedited releases blocking compromised eMudhra CA keys
- BPF verifier rewrite targets Rust with recursion and open loops
- Node.js patches Brotli RCE that spreads far past the runtime
- Rocq and Lean 4 kernel bugs let checked proofs of False through
- All releases →
- Lean formalization of Julia Base surfaces hundreds of bugs
- QEMU fixes eight OOB and overflow bugs in device emulation
- When one CA's weak P-384 keys force everyone else to purge trust
- BPF maintainer NACKs page_owner iterator series as overkill
- Kernel hardens virtio-net against rogue checksum offload metadata
- Rust VFIO PCI abstractions land with NVIDIA vGPU driver
- QEMU ties QOM properties to QAPI types for management tools
- Git eyes faster connectivity checks for large repos
- Systemd eBPF tools force per-kernel packaging on NixOS
- Linux hardens virtio-net checksum offload against rogue metadata
- Stallman bars LLM-generated code from NonGNU ELPA
- Kernel patch series stops uprobes from stalling every fork()
- PostgreSQL 19 promotion can hang on stuck client writes
- Debian questions copyright of LLM-built Northstar browser
- BPF unwinding lets Rust and C++ keep their destructors
- Git moves toward formal votes on AI contributions after summit
- Linux bridge MST bypasses blocking without VLAN filtering
- PyTorch Dynamo guard paths race into use-after-free
- QPACK bugs let attackers OOM many HTTP/3 servers
- Swift opens review of Cell and Volatile interior mutability types
- Fixed moduli keep lattice PQC simple across security levels
- ZDI flags CVSS 9.0 race-condition RCE in Linux KSMBD
- Apache Pulsar patches 14 CVEs, including critical auth bypass
- PHP patches critical RCE via stale global request state
- Linux VFS stops stuck unmounts from freezing the host
- PostgreSQL moves toward custom storage options for table access methods
- PHP patches critical unauthenticated RCE in 8.2 through 8.5
- Virtual swap collides with what memory.swap has always meant
- CPython supported-JIT PEP 836 withdrawn over bandwidth
- Fedora distrusts eMudhra CAs after trivial private keys leak
- PyTorch RFC proposes opt-in mmap for distributed checkpoint loads
- AMD posts phase-1 amdgpu SVM on shared DRM GPUSVM core
- Hugging Face seeks MXFP4 backward kernels for GPT-OSS training
- NTP group moves to drop leap seconds from NTPv5 draft
- Netherlands builds sovereign government desktop on NixOS
- PyTorch from_file builds oversized tensors after byte-count overflow
- Early attestation bugs crack Cocos AI and Contrast TLS claims
- IETF last call rejects mandatory ops sections in RFCs