Who contributed to Arch Linux on August 20, 2026?

4 developers shipped this update, including Jan Steffens, George Hu, Andreas Radke, and Linus Torvalds.

What were the notable Arch Linux updates?

Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity, Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-next, and Merge tag 'chrome-platform-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/chrome-platform/linux.

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

github ↗

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

LINUS PULLS INTEGRITY FIX FOR TPM-BYPASS

By RepoJournal · Filed 06:57 UTC on August 20, 2026 · About Arch Linux

4 people shipped this

Linus Torvalds @torvalds 5 cited

Andreas Radke @andyrtr 3 cited

Jan Steffens @heftig 1 cited

George Hu @Integral-Tech 1 cited

Linus merged the integrity-v7.3 tag, addressing a TPM initialization race that could silently bypass IMA.

The kernel's integrity subsystem now lets builders defer IMA initialization with CONFIG_IMA_INIT_LATE_SYNC, fixing a race where IMA could fall back to TPM-bypass mode [1]. Smack lands a critical UAF fix in smack_file_send_sigiotask() plus tightened 0-255 limits on smackfs interfaces [2]. Chrome platform gets a memory overread fix in cros_ec_sensorhub and a resource leak fix in cros_ec_debugfs, alongside a new post_power_on_delay_ms for Hana [3]. Input adds the Imagis ISA1200 haptic driver and hardens core open/close/inhibit paths [4]. PWM sees cleanups in C and Rust with a new SoC variant supported [5]. On the package side, ostree 2026.4-1 hits extra-x86_64 [6], while fvm 4.1.4-1 enters extra-testing [7] and the LTS driver trio of tp_smapi-lts, r8168-lts, and nvidia-open-lts all moved to stable [8][9][10].

Action items

→ Rebuild kernels with CONFIG_IMA_INIT_LATE_SYNC if TPM is used and IMA bypass is a concern archlinux/linux [plan]
→ Upgrade to ostree 2026.4-1 on extra-x86_64 archlinux/state [monitor]
→ Test fvm 4.1.4-1 in extra-testing to catch regressions before stable archlinux/state [plan]
→ Install the promoted LTS drivers (tp_smapi-lts, r8168-lts, nvidia-open-lts) from extra archlinux/state [monitor]

References

[1] Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity archlinux/linux
[2] Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-next archlinux/linux
[3] Merge tag 'chrome-platform-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/chrome-platform/linux archlinux/linux
[4] Merge tag 'input-for-v7.3-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input archlinux/linux
[5] Merge tag 'pwm/for-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/linux archlinux/linux
[6] update ostree to 2026.4-1 in extra-x86_64 archlinux/state
[7] update fvm to 4.1.4-1 in extra-testing-x86_64 archlinux/state
[8] move tp_smapi-lts from extra-testing-x86_64 to extra-x86_64 archlinux/state
[9] move r8168-lts from extra-testing-x86_64 to extra-x86_64 archlinux/state
[10] move nvidia-open-lts from extra-testing-x86_64 to extra-x86_64 archlinux/state

Quick answers

What shipped in Arch Linux on August 20, 2026?: Linus merged the integrity-v7.3 tag, addressing a TPM initialization race that could silently bypass IMA. In total, 99 commits and 1 releases landed.
Who contributed to Arch Linux on August 20, 2026?: 4 developers shipped this update, including Jan Steffens, George Hu, Andreas Radke, and Linus Torvalds.
What were the notable Arch Linux updates?: Merge tag 'integrity-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity, Merge tag 'Smack-for-7.3' of https://github.com/cschaufler/smack-next, and Merge tag 'chrome-platform-v7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/chrome-platform/linux.

French locale gets overhauled in archinstall

archinstall cleans house as a 416-string French translation refresh lands, but the real story is what it signals for the installer's stability.

infra 56 shipped

@archlinux Aug 19

SIGNSTAR PATCHES CRITICAL H2 VULNERABILITY

Wiktor Kwapisiewicz pushed a fix to signstar that updates the `h2` crate to a non-vulnerable version, closing a security hole that could have compromised your signing infrastructure.

infra 58 shipped

@archlinux Aug 18

SQLPARSER DOS FIX LANDS IN ARCHWEB

Arch Linux's dependency stack just got a critical safety fix, and it's not the one you think.

infra 56 shipped

@archlinux Aug 17

ARCH LINUX PURGES LEGACY 32-BIT MULTIMEDIA LIBS FROM MULTILIB

Antonio Rojas removed five obsolete 32-bit multimedia libraries from the multilib-x86_64 repository in a single sweep, signaling the end of support for aging FireWire and image processing codecs.

infra 50 shipped

Elsewhere on the wire

AI Agents Aug 21

CLINE V4.1.11 SHIPS IMAGE GENERATION AND AGENT-UI FIXES

Cline's latest release lets models generate images mid-task, while LlamaIndex quietly breaks frontend tool handlers.

ai-agents 78 shipped

Local LLMs Aug 21

DeepSeek V4 fuses shared experts, as vLLM ships a security guard

The biggest local-LLM repos are moving fast: DeepSeek V4's MoE kernel gets a massive fusion, while vLLM patches a security hole.

+12

llms 274 shipped

@CachyOS Aug 21

CachyOS Scheduler Hotfixes and Kernel Upgrades Lead the Day

A hotfix for the scx_cake scheduler and the latest Linux 7.2 kernel are rolling out across CachyOS repos.

infra 66 shipped

Elixir & Phoenix Aug 21

Phoenix 1.8.12 patches channel message drop

Phoenix shipped a patch release that fixes a channel bug silently dropping messages without a join_ref, and LiveView is quietly rewriting the rules of navigation.