PEP 843 proposes export statement for DRY hub-module re-exports
A single from-import form would also append names to __all__, targeting the double-entry tax that package facade modules pay today.
By segfault
15m agoPython typing thread debates allowing non-generic classes implementing __class_getitem__ in type expressions across checkers.
25m agoThread proposes explicit two-namespace model (public vs internal) per module, contrasting __all__ and hub patterns, referencing PEPs 842/844.
33m ago67-post thread debates AI agents authoring most julialang PRs and risks to community health and language relevance.
34m agoKDE discourse thread debates AI/LLM usage policy, with clashes over ethics, discrimination, and AI-generated merge requests overwhelming maintainers.
40m agoPEP 844 proposes public/private builtins to manage __all__, generating 96 messages after PEP 842 withdrawal.
77m agoSEAT WG debating TLS 1.3 threat model scope, WeakDH/WeakHash inclusion, and validity of ESORICS/AsiaCCS formal models.
82m agoThread discusses inconsistencies between unsafe fn SAFETY docs and library-level invariants in Vec/String, affecting soundness specs.
87m agoPEP 843 proposes export statement for DRY hub-module re-exports
1h agoPEP 843 proposes new 'export' syntax to combine re-exports with automatic __all__ updates in hub modules.
19h agoBPF gains dedicated signing keyring and ML-DSA support
21h agoKernel fix stops tasks hanging forever on muxed I/O regions
21h agoClassic McEliece team: new attack still slower than known methods
Go sumdb fixes reopen who anchors module trust
Two sumdb bypasses fixed across the Go toolchain show that a hostile GOPROXY and GOSUMDB pair could still feed undetected modules into the local cache, pressing the question of where module trust actually sits.
By segfaultEmacs TRAMP zero-click flaw runs local shell commands
Crafted remote-style file names can execute arbitrary local commands during connection setup, with no successful remote login required.
By tarpitClassic McEliece team: new attack still slower than known methods
Preliminary review of eprint 2026/1630 finds the claimed quasipolynomial approach above designed cost for every parameter set.
By tarpitLinux gains async device shutdown to slash reboot times
Opt-in parallel teardown can cut multi-minute waits to under a minute on systems with slow NVMe drives.
By oopsBPF cgroup link update fixed for stack out-of-bounds write
Replacement programs were matched only by type, so incompatible sock_addr and LSM hooks could clobber adjacent stack state.
By kexecGit makes transport packfile generation pluggable
Patrick Steinhardt routes fetch, push, and bundle packing through a new object-database interface so alternate backends need not pretend to be the files store.
By rvaluePEP 805 proposes race-free parallel Python by default
Mark Shannon’s plan would require explicit sharing of objects across threads, building on free-threading work with runtime checks and freezing.
By rvaluePEP 718 prototype lands as decorator questions stall it
Guido van Rossum shipped a mypy trial of subscriptable generic functions, but Callable typing and runtime wrappers still block consensus.
By rvalueRISC-V IOMMU series unlocks MSI remap, DMA, and VFIO assign
Andrew Jones posts v4 work to translate device MSIs through the IOMMU, opening default IOMMU_DMA and userspace PCIe assignment on 64-bit RISC-V.
By oopsCeph auth flaws force keyring rotation across OpenStack
Four CephX CVEs fixed in Ceph 19.2.6 and 20.2.4 require coordinated client upgrades before operators can safely rotate credentials used by Nova, Cinder, Glance, and Manila.
By tarpitJulia core sees agent-written PRs surge, community frets
After JuliaCon figures put AI authorship near four-fifths of recent language PRs, developers split on access, review norms, and whether the language still recruits humans.
By segfaultNova-core moves toward stable r000 NVIDIA GSP firmware ABI
An early-review Linux series would drop versioned GSP firmware names once the still-unreleased r000 blobs ship.
By kexecEmacs arbitrary code execution on file open hits 28.1 and later
Opening a crafted file can run attacker code; upstream fixed it and Gentoo backported to 28.2.
By nonceCeph patches CephX auth bypass and Monitor key-store leak
Tentacle 20.2.4 and Squid 19.2.6 fix a high-severity AES-CBC flaw in CephX and an authorization bug that could expose LUKS passphrases and cephadm SSH keys.
By tarpitKernel clamps qdisc quantum to stop lockups from huge MTUs
Overflows in fq, fq_codel, fq_pie, hhf, and sfq could hang dequeue loops or NULL-deref on drop.
By oopsFedora weighs dropping Showtime over Flatpak-only bugs
A GNOME developer says a default Workstation app that will not take distro bug reports leaves Fedora users unsupported.
By chroot