$ the-wire · showcase
SCSI merge closes, Plymouth and SDDM publication hardened
By RepoJournal · Filed · About Linux
Linus pulled the remaining SCSI updates for the 7.3 merge window while omarchy ships a wave of security fixes for boot-time asset publication.
Linus Torvalds merged the remaining SCSI updates for the 7.3 merge window, a 26-commit pull that enables context analysis for the SCSI layer and UFS alongside bug fixes and hardening, including a fix for a SCSI host leak on workqueue allocation failure in the snic driver [1]. Across the omarchy boot stack, a coordinated series of security fixes hardens Plymouth and SDDM asset publication: the commits pin Plymouth asset reads before elevation [4], harden the publication itself [3], and keep SDDM color substitution collision-free for White themes [2]. The same effort addresses a Plymouth publication race in the merged 'Secure Plymouth and SDDM asset publication' pull request [6], and separately merges 'httpOnly' cookie enforcement for the web app [5]. None of these omarchy changes are flagged as breaking for downstream users, but anyone running a custom boot theme should retest their Plymouth and SDDM configuration after upgrading. On the tooling front, archinstall enables Pylint's cell-var-from-loop warning, which will flag closures that capture loop variables and likely help catch a class of late-binding bugs [7][8].
Action items
- → Upgrade omarchy to include the Plymouth/SDDM publication hardening before relying on boot-time asset security basecamp/omarchy [immediate]
- → Retest Plymouth and SDDM white themes after the omarchy update to confirm color substitution remains collision-free basecamp/omarchy [plan]
- → Monitor your Linux kernel build for the SCSI host leak fix when using snic torvalds/linux [monitor]
References
- [1] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mkp/scsi ↗ torvalds/linux
- [2] [Security] Complete Plymouth publication coverage ↗ basecamp/omarchy
- [3] [Security] Harden Plymouth asset publication ↗ basecamp/omarchy
- [4] [Security] Pin Plymouth asset reads before elevation ↗ basecamp/omarchy
- [5] Merge pull request #8496 from Chessing234/security/webapp-http-only ↗ basecamp/omarchy
- [6] Merge pull request #8934 from ErikMelton/security/plymouth-publication-race ↗ basecamp/omarchy
- [7] Enable Pylint cell-var-from-loop warning ↗ archlinux/archinstall
- [8] Enable Pylint cell-var-from-loop warning (#4736) ↗ archlinux/archinstall