RepoJournal
Arch Linux @archlinux
124 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-05-15
stories 62
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

ARCH KERNEL 7.0.7-ARCH2 SHIPS WITH SECURITY HARDENING AND NETWORKING FIXES

By RepoJournal · Filed · About Arch Linux · Composed from the cited sources · methodology

h8d13
1 person shipped this
h8d13 @h8d13 1 cited

Arch Linux kernel v7.0.7-arch2 is live with unprivileged namespace restrictions, io_uring memory fixes, and critical SMC-D socket vulnerabilities patched.

The new kernel [1] lands five critical patches on top of stable 7.0.7, including a sysctl to disable unprivileged CLONE_NEWUSER (closing a privilege escalation vector), udmabuf scatterlist corruption fixes, and io_uring/zcrx freelist violation warnings. Network stack gets hardened too: shared-frag markers now propagate correctly through frag-transfer helpers [2], and SMC-D socket code rejects malicious CHID-0 ACCEPT packets that could match empty device slots [6]. Meanwhile, the archinstall team shipped standalone IWD networking support [7], letting minimal systems skip the networkmanager/wpa_supplicant/polkit dependency chain entirely. iwd now handles DHCP directly while systemd-resolved picks up DNS via stub symlink. Across the Haskell ecosystem, five core packages are staging updates including quic (0.1.28-27), criterion (1.6.3.0-78), and conduit-extra (1.3.8-105) [3] [4] [5].

Action items

References

  1. [1] Arch Linux kernel v7.0.7-arch2 ↗ archlinux/linux
  2. [2] Merge tag 'net-7.1-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net archlinux/linux ↗
  3. [3] update haskell-quic to 0.1.28-27 in extra-staging-x86_64 archlinux/state ↗
  4. [4] update haskell-criterion to 1.6.3.0-78 in extra-staging-x86_64 archlinux/state ↗
  5. [5] update haskell-conduit-extra to 1.3.8-105 in extra-staging-x86_64 archlinux/state ↗
  6. [6] net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot archlinux/linux ↗
  7. [7] Add IWD standalone option to network configuration + fix NM_IWD ↗ archlinux/archinstall

$ ls archlinux/reviews/ # the step-back reads

the week in review Kernel v7.2.4-arch1 ships with userns sysctl the month in review August's Arch: AUR hardening, kernel churn, and steady package flow
Full archive → Weekly reviews →

Quick answers

What shipped in Arch Linux on May 15, 2026?
Arch Linux kernel v7.0.7-arch2 is live with unprivileged namespace restrictions, io_uring memory fixes, and critical SMC-D socket vulnerabilities patched. In total, 58 commits, 2 pull requests, and 2 releases landed.
Who contributed to Arch Linux on May 15, 2026?
1 developer shipped this update, including h8d13.
What were the notable Arch Linux updates?
Arch Linux kernel v7.0.7-arch2, Merge tag 'net-7.1-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net, and update haskell-quic to 0.1.28-27 in extra-staging-x86_64.
♥

$ log @archlinux --recent

Felix Yan promotes the xmonad stack to extra, moor lands at 2.19.2 50 shipped Synapse 1.161.0 lands in infrastructure, anki promoted to extra 70 shipped Arch ships a CLONE_NEWUSER kill switch in v7.2.6-arch2 59 shipped mise and asusctl land in extra, tracexec hits 1.0 50 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.