Debian patches apt RCE that let MITM swap verified packages
A man-in-the-middle attacker could replace a package after verification and run code as root when HTTP retries were enabled.
By tarpit#debian
No shared playbook: FOSS projects diverge on policing AI patches and prose
LLVM, the kernel, Debian, and QEMU are inventing incompatible rules for AI text, attribution tags, and automated review just as maintainer bandwidth collapses under extractive submissions.
By segfaultDebian developers balk at unannounced LLM reviews in NEW queue
Maintainers say automated generative-AI feedback on package uploads conflicts with a recent project vote and dumps unvetted work on volunteers.
By chrootDebian questions copyright of LLM-built Northstar browser
An ITP for the C-based Nordstjernen engine stalls on whether its authors can validly claim and GPL code they largely did not write or review.
By chroot