$ cat archlinux/week/2026-09-07.log
the week in review · Sep 7 – Sep 13, 2026
Kernel v7.2.4-arch1 ships with userns sysctl
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
Arch's stable kernel adds a sysctl to disable unprivileged user namespaces, and aurweb now rejects maintainership-by-push to deleted packages.
Arch Linux kernel v7.2.4-arch1 archlinux/linux
The Arch kernel carries a patch adding a sysctl to allow disabling unprivileged CLONE_NEWUSER, applied on top of stable v7.2.4. If your workflows or sandboxes depend on unprivileged user namespaces, the kernel now exposes a switch that can turn them off, so check how that sysctl is set on your systems.
fix: do not grant maintainership by pushing to a deleted package base archlinux/aurweb
aurweb now rejects a push to a deleted package base and points the pusher at 'restore', which returns the package as an orphan. Pushing to an orphan no longer claims it either, except by a co-maintainer, so any automation that relies on push-to-claim behavior needs rework.
remove perl-crypt-ssleay from extra-x86_64 archlinux/state
by Sergej Pupykin
perl-crypt-ssleay was removed from extra-x86_64. If you still depend on it, it is no longer in the repository and needs to come from AUR or another source.
remove tp_smapi-lts from extra-x86_64 archlinux/state
tp_smapi-lts was removed from extra-x86_64. ThinkPad users relying on it for SMAPI support need an alternative or to track it elsewhere.
move leancrypto from core-staging-x86_64 to core-testing-x86_64 archlinux/state
leancrypto moved from core-staging to core-testing. It is not in core yet, so do not depend on a stable core install until it finishes the promotion path.
move gnutls from core-staging-x86_64 to core-testing-x86_64 archlinux/state
gnutls moved from core-staging to core-testing, continuing its path toward core. Watch for the eventual core promotion if you pin or build against it.
configfs: unhash the dentry before dropping the item in rmdir archlinux/linux
The configfs rmdir fix unhashes the dentry before dropping the item, closing a window where a hashed dentry could be mistaken for a live config_item. Anyone using configfs-backed subsystems should take the kernel update.
chore(release): prepare version 6.5.1 archlinux/aurweb
aurweb prepared version 6.5.1 in the same period that the maintainership fix landed. The release packages the push-handling change for deployment.
$ ls archlinux/week/ # the briefings behind this review