RepoJournal
Arch Linux

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

OPENSSL UPGRADE UNBLOCKED AFTER UPSTREAM FIX

By RepoJournal · Filed · About Arch Linux

The rsync-ssl blocker that's been holding back OpenSSL updates across infrastructure is finally resolved, clearing the path for security patches.

Infrastructure has been deliberately ignoring OpenSSL upgrades due to a broken rsync-ssl dependency, but both the rsync [1] and OpenSSL [1] upstream issues have shipped fixes. This unblock comes paired with a critical nginx configuration fix [2]: Let's Encrypt switched to their Generation Y intermediates last week, creating a longer certificate chain that exceeds nginx's default verification depth of one. The dbscripts team deployed the depth fix [3] yesterday to restore mirrorauth validation on archlinux.org. With both the certificate chain issue [2] and the rsync-ssl blocker [4] resolved, the infrastructure team can now drop the OpenSSL upgrade ignore [5]. The main release train also pushed five package updates [6] [7] [8] [9] [10], including radicale 3.7.5, python-distributed 2026.6.0, and tig's graduation from testing to stable. Finishing the stack: mypy reached v2 in alpm dependencies [11].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Stop ignoring openssl upgrade archlinux/infrastructure
  2. [2] dbscripts: Fix broken mirrorauth due to longer chain on archlinux.org archlinux/infrastructure
  3. [3] Merge branch 'dbscripts-verify-depth' into 'main' archlinux/infrastructure
  4. [4] Stop ignoring openssl upgrade archlinux/infrastructure
  5. [5] Merge branch 'drop_openssl_upgrade_ignore' archlinux/infrastructure
  6. [6] update radicale to 3.7.5-1 in extra-any archlinux/state
  7. [7] update python-distributed to 2026.6.0-1 in extra-any archlinux/state
  8. [8] update nvshmem to 3.7.0-1 in extra-x86_64 archlinux/state
  9. [9] move tig from extra-testing-x86_64 to extra-x86_64 archlinux/state
  10. [10] update python-aiogram to 3.29.0-1 in extra-any archlinux/state
  11. [11] chore(deps): Update dependency mypy to v2 archlinux/alpm

Quick answers

What shipped in Arch Linux on June 15, 2026?
The rsync-ssl blocker that's been holding back OpenSSL updates across infrastructure is finally resolved, clearing the path for security patches. In total, 60 commits landed.
What were the notable Arch Linux updates?
Stop ignoring openssl upgrade, dbscripts: Fix broken mirrorauth due to longer chain on archlinux.org, and Merge branch 'dbscripts-verify-depth' into 'main'.

More from @archlinux

Daily updates, in your inbox

Follow Arch Linux

Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.