Who contributed to PyTorch on June 12, 2026?

3 developers shipped this update, including YufengShi-dudu, Gasoonjia, and rascani.

What were the notable PyTorch updates?

submodules: bump gloo to 74cc005ae13f69c11d8a41e50b42025b6730e796 (#187077), [CD] Bump 13.0 builds to 13.0.3 (#179758), and Make tbe.ssd.ssd_config canonical; ops_common is now a shim.

@pytorch

PyTorch and the broader machine-learning ecosystem

github ↗

Pick a date

Topics: Python AI / ML Full archive →

The Wire · Showcase

GLOO SECURITY FIX SHIPS, CUDA 13.0.3 LANDS, FBGEMM MIGRATION ADVANCES

By RepoJournal · Filed 06:04 UTC on June 12, 2026 · About PyTorch

3 people shipped this

YufengShi-dudu @YufengShi-dudu 1 cited

Gasoonjia @Gasoonjia 1 cited

rascani @rascani 1 cited

PyTorch's core communication library just patched a size_t overflow that could let attackers write arbitrary memory over the network.

The gloo submodule bump [1] fixes a critical TCP transport vulnerability where roffset and length read directly from the wire could wrap around on 64-bit math, bypassing bounds checks. This ships alongside CUDA 13.0.3 [2], which fixes a cublasLtMatmul concurrency bug that produced incorrect results on H100s and newer. Both hit production paths. On the FBGEMM front, the TBE type migration is now canonical [3]: ssd_config.py owns the config types and ops_common became a pure shim, clearing the way for the next phase of that refactor. The team also closed out 14+ failing opcheck variants by adding missing sparse_ops imports [4] [5] and implementing ROCm subwarp reduction kernels [6]. ExecutorTorch added an Arm TOSA FP8 run-only mode [7] so you can validate lowered artifacts without eager CPU execution, and optimized SDPA thresholds [8] to cover both Gemma and Qwen workloads. Cortex-M op tests now accept a parametrized target fixture [9], letting you test across cortex-m55 and future architectures in a single CI run.

Action items

→ Bump gloo submodule immediately if running inference serving or distributed training with untrusted networks pytorch/pytorch [immediate]
→ Merge CUDA 13.0.3 builds before next H100+ batch pytorch/pytorch [plan]
→ Monitor FBGEMM opcheck results; sparse ops imports are now required in test files pytorch/FBGEMM [monitor]
→ Test vit_base_patch14_dinov2 with emulate_precision_casts on MI350X if you saw grad accuracy drops pytorch/benchmark [plan]

References

[1] submodules: bump gloo to 74cc005ae13f69c11d8a41e50b42025b6730e796 (#187077) pytorch/pytorch
[2] [CD] Bump 13.0 builds to 13.0.3 (#179758) pytorch/pytorch
[3] Make tbe.ssd.ssd_config canonical; ops_common is now a shim pytorch/FBGEMM
[4] Fix block_bucketize 2DWeightsTest opcheck faketensor failures (#5870) pytorch/FBGEMM
[5] Add populate_bucketized_permute meta + fix block_bucketize opcheck (#5869) pytorch/FBGEMM
[6] Add `subwarp_reduce_add` for `GROUP_REDUCE_ALL_SUM` on ROCm (#5875) pytorch/FBGEMM
[7] Arm backend: Add run-only TOSA ref model test mode ↗ pytorch/executorch
[8] [cuda backend] optimized L_kv threshold for sdpa implementation selection. ↗ pytorch/executorch
[9] Cortex-M: run op tests against a selectable target ↗ pytorch/executorch

Quick answers

What shipped in PyTorch on June 12, 2026?: PyTorch's core communication library just patched a size_t overflow that could let attackers write arbitrary memory over the network. In total, 74 commits and 18 pull requests landed.
Who contributed to PyTorch on June 12, 2026?: 3 developers shipped this update, including YufengShi-dudu, Gasoonjia, and rascani.
What were the notable PyTorch updates?: submodules: bump gloo to 74cc005ae13f69c11d8a41e50b42025b6730e796 (#187077), [CD] Bump 13.0 builds to 13.0.3 (#179758), and Make tbe.ssd.ssd_config canonical; ops_common is now a shim.

EXECUTORCH ROUTES REASONING SEPARATELY, PYTORCH MODERNIZES COMPILER STACK

ExecutorTorch's shared OpenAI adapter now exposes optional reasoning content as a first-class output channel, while PyTorch core moves to clang-21 and strips dead C++ macros.

python 20 shipped 1-min read

@pytorch 2 days ago

DYNAMO FIXES GRAPH-BREAKING SDPA PARAMS, PAT SVD LEAK BREAKS DOWNSTREAM TESTS

PyTorch shipped fixes for two critical compilation and module patching bugs overnight that were silently breaking downstream workflows.

python 19 shipped 1-min read

@pytorch 3 days ago

CRITICAL OIDC INJECTION IN DOCS PREVIEW WORKFLOW PATCHED

PyTorch's docs-preview CI trusted fork-controlled artifacts in a context with token-write permissions, exposing the entire build pipeline to code injection.

python 66 shipped 1-min read

@pytorch 4 days ago

PYTORCH AUTOGRAD GETS 7% FASTER, AOTI FIXES SILENT FAILURES

Interned attribute names in autograd.Function shaved microseconds off the hot path while AOTI's scatter operations now properly report errors instead of silently corrupting results.

python 64 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.