The Wire · Showcase
METABASE SECURITY PATCH FORCES INFRASTRUCTURE MOVE
By RepoJournal · Filed · About Arch Linux
Arch infrastructure team patched a critical Metabase vulnerability overnight, signaling active security work across the fleet.
Levente Polyak pushed an emergency Metabase upgrade to the finance stack due to a security advisory [1], the kind of move that doesn't happen without real teeth. Meanwhile, the build infrastructure shipped a meaningful refactor merging local and remote executor code paths into unified logic [2], cutting complexity that compounds over time. Package repos are cycling through routine updates: GPU Screen Recorder landed version 6.0.0 [3] and its UI companion hit 1.13.3 [4], while python-proton-core moved to 0.7.4 in testing [5]. The AUR web stack added a database index on PackageRequests.ClosedUID to address performance friction [6], the kind of targeted optimization that keeps query performance from creeping. Fifty-four commits across four repos in a single period shows healthy throughput without heroics.
One email a day. Unsubscribe in one click.
Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Verify Metabase upgrade completed on finance infrastructure archlinux/infrastructure [immediate]
- → Test GPU Screen Recorder 6.0.0 in your workflow before wide adoption archlinux/state [plan]
- → Monitor AUR web query performance post-index deployment archlinux/aurweb [monitor]
References
- [1] finance: upgrade metabase due to security advisory archlinux/infrastructure
- [2] Merge branch 'unify-local-remote-executor-code' into 'main' archlinux/buildbtw
- [3] update gpu-screen-recorder to 6.0.0-1 in extra-x86_64 archlinux/state
- [4] update gpu-screen-recorder-ui to 1.13.3-1 in extra-x86_64 archlinux/state
- [5] update python-proton-core to 0.7.4-1 in extra-testing-any archlinux/state
- [6] feat: add index on PackageRequests.ClosedUID archlinux/aurweb