Foundation Source

The Linux Foundation has announced the launch of LF India, a new regional initiative extending the open source organisation's presence into India. The move aims to support India's growing developer community and expand collaboration on open source projects in the region. Details on specific programmes and partners have not yet been made widely available.

The Document Foundation, the non-profit behind LibreOffice, published a blog post arguing that the absence of AI features is itself a selling point. The piece pushes back against the industry trend of adding AI to every productivity tool, framing LibreOffice's lack of AI as a deliberate choice that serves users who want predictable, privacy-respecting software.

RFC 1122, the document that defines the TCP/IP requirements every host on the Internet must meet, was published in October 1989. Networking enthusiasts are revisiting its history, noting how the standard laid the groundwork for protocols used in Linux and open-source networking stacks that still run the modern Internet.

Neon is developing an SCP Foundation movie that will use an open-source production model, positioning it against A24's own project based on the popular collaborative horror fiction universe. The move has drawn attention because the SCP Foundation is a crowdsourced creative property, and an open-source approach could reshape how studios adapt community-owned stories for film.

Version 18.1 of GDB, the GNU Debugger widely used for debugging C, C++ and other compiled programs, has been released. The announcement was made on the GDB mailing list maintained by Sourceware, pointing users to the new stable point release. Developers are sharing the news in programming communities, where the debugger remains a core tool in open-source toolchains alongside GCC.

The Wikimedia Foundation, the nonprofit behind Wikipedia, brought a message titled 'Human knowledge at stake' to the United Nations General Assembly, arguing that free access to reliable information deserves protection at the global level. The appearance underlines growing concern about the future of open knowledge, as misinformation, funding pressures and AI-driven content reshape how people find trustworthy information online.

The Pacific Legal Foundation is calling on Congress to pass a bipartisan permitting reform bill. The group argues that overhauling the permitting process would cut delays and red tape for infrastructure and development projects. The appeal comes as permitting reform remains a recurring point of debate among lawmakers from both parties, though the specifics of the proposed bill and its prospects are not detailed in the source material.

The Unitary Foundation has launched its 2026 Quantum Open Source Software Survey, an annual effort to gather input from the quantum computing community on the open source tools and libraries they use and want improved. The survey helps set priorities for community-driven quantum software development.

Film studio Neon is moving ahead with a movie based on the SCP Foundation, the collaborative online horror fiction universe, promising a genuinely open-source production. The announcement follows controversy around A24's rival SCP project, which critics said fell short of the community-driven spirit of the source material. Fans are debating what a truly open approach to adapting the crowd-created mythos should look like.

The Linux Foundation has appointed Michael Hursta as executive director of the x402 Foundation, the body stewarding the x402 payment protocol. Hursta will be responsible for guiding the project's governance, ecosystem growth and open-source collaboration as adoption of the protocol expands. The announcement, carried by PR Newswire, marks a formal step in organising the foundation's leadership.

The Eclipse Foundation has launched the Sovereign AI Foundation, a new initiative focused on open source approaches to AI control and governance. The move signals the Eclipse Foundation's entry into the debate over who controls artificial intelligence infrastructure, positioning open source as an alternative to proprietary AI models dominated by major tech companies.

A networking enthusiast has highlighted that RFC 1267, the document defining Border Gateway Protocol version 3, was published in October 1991. BGP remains the routing protocol that ties the internet together, so reminders of its early specifications draw interest from engineers interested in networking history, open-source networking, and how the internet's core infrastructure evolved over more than three decades.

The OpenClaw Foundation has launched an open-source platform for building AI agents. The announcement, reported by Tech in Asia, positions the foundation among a growing number of organisations offering openly licensed tools for autonomous AI development. Details about the platform's features, licensing terms and initial partners were not included in the initial report.

Indie studio Neon has announced a film adaptation of the SCP Foundation, the vast collaborative horror fiction project published under a Creative Commons license. The announcement is being read as a jab at rival studio A24, which is developing its own SCP-related project, with Neon leaning on the free-to-use nature of the source material. Fans of the SCP wiki are following the studio rivalry closely.

The Eclipse Foundation has announced the launch of the Sovereign AI Foundation, a new initiative aimed at supporting open-source approaches to AI that give nations and organisations control over their own AI infrastructure and data. Details on founding members and initial projects have not been widely reported yet, but the move ties the Eclipse open-source community to the growing debate over digital and AI sovereignty.

Foundation Source has appointed new technology and product leaders to advance its PhilTech platform, the company announced via PR Newswire. The moves are intended to strengthen the firm's philanthropic technology offerings, though the executives' names and prior roles were not detailed in the announcement. The appointment signals continued investment in digital tools for charitable giving.

A vulnerability identified as CVE-2026-74221 has been recorded for U-Boot, the widely used open-source bootloader for embedded systems. Security tracking feeds circulated the advisory with minimal detail, giving no description of the flaw, affected versions or severity. Details are expected to be added as databases like NVD complete their entries.

The Eclipse Foundation has co-launched a new Sovereign AI Foundation, an initiative aimed at advancing open, independently governed AI technology. The move signals growing momentum behind efforts to build AI infrastructure outside the control of dominant tech vendors, with open-source governance positioned as central to the project. Details on founding partners and initial programs remain limited.

A vulnerability tracked as EUVD-2026-91568 has been disclosed in Apache Thrift, the Apache Software Foundation's cross-language RPC framework. The flaw, an infinite loop with an unreachable exit condition in the Python bindings, carries a CVSS v3.1 score of 8.2. Details on affected versions remain incomplete pending an update from the vendor.

Film studio Neon has announced it is developing a film based on the SCP Foundation, the collaborative online fiction project, and plans to make it open-source. The news is drawing attention from fans of the long-running community-created horror universe, whose stories have circulated freely online for years. Details on directors, cast, or release timing have not yet been shared.

The Defold Foundation has released version 1.13.2 of its Defold game engine, a free, open-source tool used to build 2D and 3D games across platforms, including Linux. The point update is being shared among Linux gaming and game development communities, where Defold is a popular lightweight alternative to engines like Unity and Godot.

Armin Ronacher, the developer behind Flask and other well-known open source tools, has published an essay outlining Deser, a new approach to serialization in Rust. The piece questions how the widely used serde ecosystem is designed and argues for rethinking the way Rust handles data formats. Developers on programming forums are sharing and debating the ideas, with some welcoming fresh thinking on a foundational part of the Rust toolchain and others defending the status quo.

A vulnerability tracked as EUVD-2026-90762 has been recorded for Apache Camel Quarkus, the Apache Software Foundation's Quarkus extensions for Camel. The flaw, rated 8.6 out of 10 under CVSS v3.1, involves improper restriction of XML external entity references in the XSLT support extension (camel-quarkus-support-xalan). Such issues can allow attackers to read files or make requests from affected systems. The record was updated on 1 October 2026, and security teams are being urged to check whether their deployments use the affected extension.

The Apache Software Foundation has released HTTP Server 2.4.69, a maintenance update that fixes 20 security vulnerabilities in the widely used open-source web server. Admins are being urged to update their installations promptly, as the web server powers a large share of websites worldwide and unpatched flaws can expose servers to attack.

A vulnerability tracked as EUVD-2026-91330 has been catalogued affecting the Lua component of Apache Thrift, the open-source RPC framework maintained by the Apache Software Foundation. The flaw, scored 8.7 out of 10 under CVSS v3.1, involves allocation of resources without limits or throttling and improper handling of length parameter inconsistency, which could enable denial-of-service conditions.

The Qt Project has released Qt 6.12, a long-term support version of the cross-platform application framework. As an LTS release, it will receive extended maintenance and support, making it a likely target for developers building commercial and open-source applications who prioritize stability. Developers in open-source programming communities are sharing the announcement, noting that LTS milestones typically become the foundation for desktop, embedded, and mobile software for years to come.

A medium-severity vulnerability, EUVD-2026-90763, has been catalogued in Apache APISIX, the open-source API gateway maintained by the Apache Software Foundation. Rated 5.7 out of 10 under CVSS v3.1, the flaw involves the insertion of sensitive information into log files, with unmasked header values potentially being written in cleartext.