RepoJournal
Arch Linux @archlinux
124 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-05-19
stories 59
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

ARCHINSTALL CLOSES SECURITY GAP IN EFI BOOT PARTITION

By RepoJournal · Filed · About Arch Linux · Composed from the cited sources · methodology

Softer
1 person shipped this
Softer @Softer 1 cited

The installer now restricts ESP permissions to prevent world-readable secrets like random-seed files from leaking during boot.

Archinstall merged a critical fix that mounts the EFI System Partition with fmask=0077 and dmask=0077 [1], blocking unauthorized access to sensitive boot-time files. The same PR series also landed translation CI validation [2] that catches a subtle but pervasive bug where f-string interpolation happens before translation lookup, causing localized messages to silently fail at runtime. A new pot_tools utility shipped with the CI work to help maintainers validate and manage the translation catalog without manual overhead. On the mail stack, Dovecot and Pigeonhole both landed testing updates [3][4] ahead of wider release, while buildbtw hit 0.0.5 [7] with changelog housekeeping complete. Desktop sees steady updates across xorg-xev and fooyin [5][6].

Action items

References

  1. [1] fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506) ↗ archlinux/archinstall
  2. [2] Add translation CI validation ↗ archlinux/archinstall
  3. [3] update dovecot to 2.4.4-1 in extra-testing-x86_64 archlinux/state ↗
  4. [4] update pigeonhole to 2.4.4-1 in extra-testing-x86_64 archlinux/state ↗
  5. [5] update xorg-xev to 1.2.7-1 in extra-x86_64 archlinux/state ↗
  6. [6] update fooyin to 0.10.7-2 in extra-x86_64 archlinux/state ↗
  7. [7] Release buildbtw version 0.0.5 ↗ archlinux/buildbtw

$ ls archlinux/reviews/ # the step-back reads

the week in review Kernel v7.2.4-arch1 ships with userns sysctl the month in review August's Arch: AUR hardening, kernel churn, and steady package flow
Full archive → Weekly reviews →

Quick answers

What shipped in Arch Linux on May 19, 2026?
The installer now restricts ESP permissions to prevent world-readable secrets like random-seed files from leaking during boot. In total, 57 commits and 2 pull requests landed.
Who contributed to Arch Linux on May 19, 2026?
1 developer shipped this update, including Softer.
What were the notable Arch Linux updates?
fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506), Add translation CI validation, and update dovecot to 2.4.4-1 in extra-testing-x86_64.
♥

$ log @archlinux --recent

Felix Yan promotes the xmonad stack to extra, moor lands at 2.19.2 50 shipped Synapse 1.161.0 lands in infrastructure, anki promoted to extra 70 shipped Arch ships a CLONE_NEWUSER kill switch in v7.2.6-arch2 59 shipped mise and asusctl land in extra, tracexec hits 1.0 50 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.