The Wire · Showcase
KERNEL UPROBE FIX LANDS, OMARCHY PATCHES COMMAND INJECTION FLAW
By RepoJournal · Filed · About Linux
Linux 7.2-rc7 merges a critical uprobe test fix while omarchy closes three arbitrary code execution vectors in theme installation.
Linus merged the probes-fixes-v7.2-rc7 tag, which converts ELF entry points to file offsets in uprobe tests [1]. This fixes uprobe registration failures on non-PIE executables where vaddr exceeds file size, a problem that was breaking dynamic instrumentation on certain binaries.
Meanwhile, omarchy shipped a breaking security fix [2] that patches command injection in theme install, eliminating three injection sinks: colors.toml values reaching sed scripts unsanitized, vscode.json name interpolation without escaping sed metacharacters, and keyboard.rg injection points. A malicious theme could execute arbitrary code during install. The same PR drops tzupdate NOPASSWD, closing privilege escalation surface.
Omarchy also fixed a monitor state assertion that was checking against a stub no longer called [3], simplified the Quattro upgrade to accept either old or new lock command names [4], and repaired theme symlinks left dangling by the state-move migration, which was expanding literal tildes inside symlink targets instead of the filesystem paths [5]. A sixth patch lets bar place widgets on unrecognized bars, fixing migration failures for custom clock implementations [6].
Archinstall landed custom LUKS2 cipher selection [7] then immediately reverted it [8], citing unresolved issues in the filesystem integration. The feature passed through multiple iterations and fixes but landed on the revert branch, so users cannot yet pick chacha20-poly1305 from the disk encryption menu.
One email a day. Unsubscribe in one click.
Keep up with Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Pull Linux 7.2-rc7 probes fix if you run dynamic uprobe instrumentation torvalds/linux [plan]
- → Update omarchy immediately to patch command injection in theme install basecamp/omarchy [immediate]
- → Monitor archinstall for LUKS2 cipher feature; skip current HEAD archlinux/archinstall [monitor]
References
- [1] Merge tag 'probes-fixes-v7.2-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace torvalds/linux
- [2] Fix command injection in theme install, drop tzupdate NOPASSWD (#6694) basecamp/omarchy
- [3] Assert the focused monitor the panel actually reports basecamp/omarchy
- [4] Simplify the Quattro upgrade, and stop it leaving an error bar behind (#6716) basecamp/omarchy
- [5] Repair theme symlinks the state-move migration left dangling (#6717) basecamp/omarchy
- [6] Let bar put place a widget on a bar it does not recognize ↗ basecamp/omarchy
- [7] feat(disk): add custom cipher selection for LUKS2 encryption ↗ archlinux/archinstall
- [8] Revert "feat(disk): add custom cipher selection for LUKS2 encryption (#4581)" (#4708) archlinux/archinstall