RepoJournal
Arch Linux @archlinux
124 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-08-20
stories 100
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

LINUS PULLS INTEGRITY FIX FOR TPM-BYPASS

By RepoJournal · Filed · About Arch Linux · Composed from the cited sources · methodology

Linus Torvalds Andreas Radke Jan Steffens George Hu
4 people shipped this
Linus Torvalds @torvalds 5 cited Andreas Radke @andyrtr 3 cited Jan Steffens @heftig 1 cited George Hu @Integral-Tech 1 cited

Linus merged the integrity-v7.3 tag, addressing a TPM initialization race that could silently bypass IMA.

The kernel's integrity subsystem now lets builders defer IMA initialization with CONFIG_IMA_INIT_LATE_SYNC, fixing a race where IMA could fall back to TPM-bypass mode [1]. Smack lands a critical UAF fix in smack_file_send_sigiotask() plus tightened 0-255 limits on smackfs interfaces [2]. Chrome platform gets a memory overread fix in cros_ec_sensorhub and a resource leak fix in cros_ec_debugfs, alongside a new post_power_on_delay_ms for Hana [3]. Input adds the Imagis ISA1200 haptic driver and hardens core open/close/inhibit paths [4]. PWM sees cleanups in C and Rust with a new SoC variant supported [5]. On the package side, ostree 2026.4-1 hits extra-x86_64 [6], while fvm 4.1.4-1 enters extra-testing [7] and the LTS driver trio of tp_smapi-lts, r8168-lts, and nvidia-open-lts all moved to stable [8][9][10].

Action items

References

  1. [1] Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity archlinux/linux ↗
  2. [2] Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-next archlinux/linux ↗
  3. [3] Merge tag 'chrome-platform-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/chrome-platform/linux archlinux/linux ↗
  4. [4] Merge tag 'input-for-v7.3-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input archlinux/linux ↗
  5. [5] Merge tag 'pwm/for-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/linux archlinux/linux ↗
  6. [6] update ostree to 2026.4-1 in extra-x86_64 archlinux/state ↗
  7. [7] update fvm to 4.1.4-1 in extra-testing-x86_64 archlinux/state ↗
  8. [8] move tp_smapi-lts from extra-testing-x86_64 to extra-x86_64 archlinux/state ↗
  9. [9] move r8168-lts from extra-testing-x86_64 to extra-x86_64 archlinux/state ↗
  10. [10] move nvidia-open-lts from extra-testing-x86_64 to extra-x86_64 archlinux/state ↗

$ ls archlinux/reviews/ # the step-back reads

the week in review Kernel v7.2.4-arch1 ships with userns sysctl the month in review August's Arch: AUR hardening, kernel churn, and steady package flow
Full archive → Weekly reviews →

Quick answers

What shipped in Arch Linux on August 20, 2026?
Linus merged the integrity-v7.3 tag, addressing a TPM initialization race that could silently bypass IMA. In total, 99 commits and 1 releases landed.
Who contributed to Arch Linux on August 20, 2026?
4 developers shipped this update, including Jan Steffens, George Hu, Andreas Radke, and Linus Torvalds.
What were the notable Arch Linux updates?
Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity, Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-next, and Merge tag 'chrome-platform-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/chrome-platform/linux.
♥

$ log @archlinux --recent

Felix Yan promotes the xmonad stack to extra, moor lands at 2.19.2 50 shipped Synapse 1.161.0 lands in infrastructure, anki promoted to extra 70 shipped Arch ships a CLONE_NEWUSER kill switch in v7.2.6-arch2 59 shipped mise and asusctl land in extra, tracexec hits 1.0 50 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.