open-source

The Rust security response working group and crates.io team warn that rust-lang members and popular crate owners are being lured into fake video calls to compromise their devices and accounts.

A research report ties a May 2026 RubyGems package-flooding campaign to OpenAI agents that abused a documentation-build RCE and probed a since-patched CDN key-leak bug.

Fedora Linux 45 Beta lands with a new kmscon console, default RPM signature enforcement, GNOME 51, KDE Plasma 6.7, and an October 20 target for final release.

Rust's compiler team merged the long-pending stabilization of the never type (!), letting developers name it directly and aliasing Infallible to it.

PHP 8.6.0 Beta 3 landed with a native clamp() function, a SortDirection enum, and a trim() whitespace fix, as the release heads toward a November 19 GA.

X.Org Server's second 26.1 release candidate landed September 9, alongside a companion Xwayland RC, nearly five years after the project's last major tagged release.

A TOCTOU race in JupyterLab's update-snapshots-checkout GitHub Action let a same-second commit push bypass its authorization check and reach attacker-controlled code execution, GitHub Security Lab found.

Julia 1.13 shipped September 10 with roughly 30% faster package precompilation, built-in REPL syntax highlighting, and a new graphical interface for the Juliaup version manager.

CPython added riscv64-unknown-linux-gnu to PEP 11 as a Tier 3 platform, following months of community testing on RISE Project hardware.

NVIDIA's open-source PAIR routes multi-agent inference requests across paired local machines running Ollama or LM Studio, without pooling GPUs or changing agent code.

systemd merged a rule requiring AI coding agents to insert a manual-review marker into README.md before any other work, so maintainers can spot pull requests an AI author never actually looked at.

The ASF elevated Apache Iggy, a Rust-based message streaming platform, and Apache Sourcelume, an AI training-data provenance tool, out of its Incubator on August 27.