$ the-wire · showcase
CachyOS 6.18.52-1 lands as cachy-update hardens temp file handling
By RepoJournal · Filed · About CachyOS · Composed from the cited sources · methodology
A kernel rebase and a coordinated security hardening of cachy-update's runtime files are the day's substantive work; everything else is version churn.
CachyOS Linux 6.18.52-1 CachyOS/linux
CachyOS Linux 6.18.52-1 rebases to upstream 6.18.52 from cachyos-6.18.51-3 and drops the 6.18/amd-pstate and 6.18/sched-ext branches. The 6.18/t2 branch stays, carrying the applesmc-t2 and t2bce driver stack.
fix(security): Harden state / runtime temporary files and system-wide lockfile handling (#799) CachyOS/cachy-update
The fix(security) change set for state and runtime temporary files and system-wide lockfile handling was coordinated with Arch-Update's maintainer after a project security review, and the evaluation found the reported points would not represent critically concerning flaws if exploited; they were hardened anyway, with the same work opened as a PR.
cachyos-drm-awaiter: Query modules using alias resolving CachyOS/CachyOS-PKGBUILDS
cachyos-drm-awaiter now resolves modules by querying alias resolving (modalias to modules, as udev/kmod does) instead of assuming modname to modalias, and generates dependencies for any GPU vendor rather than only AMD, NVIDIA, and Intel. The same effort adds kmscon support and a KSM drop-in for kmsconvt services.
ungoogled-chromium-bin: update to 153.0.8010.47 CachyOS/cachyos-aur-derived
ungoogled-chromium-bin moves from 152.0.7977.75 to 153.0.8010.47, a full major-version jump for the AUR-derived package. Its sibling browser packages brave-bin and brave-origin-bin both step to 1.95.102, and firefox-esr-bin reaches 140.16.0.
7.2.6-1 && 6.18.51-1 && 7.3rc3-1 CachyOS/linux-cachyos
linux-cachyos publishes 7.2.6-1, 6.18.51-1, and 7.3rc3-1 together, matching the 7.2.6 and 6.18.52 kernels the COPR repo picked up alongside an scx-scheds-git version and tag bump.
