RepoJournal
Linux Linux
112 wires and counting

$ follow Linux

Keep up with Linux in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-31
stories 74
RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

OpenSSH 10 hardening failure and security policy land across omarchy

By RepoJournal · Filed · About Linux

Linus Torvalds Sang-Heon Jeon acrogenesis Ryan Hughes codefiles renovate
6 people shipped this
Linus Torvalds @torvalds 3 cited Sang-Heon Jeon @hqsz 2 cited acrogenesis @acrogenesis 2 cited Ryan Hughes @ryanrhughes 2 cited codefiles @codefiles renovate @renovate

omarchy's SSH hardening now works on OpenSSH 10.x, and the project added a security policy, while the kernel pulls in Coccinelle and ARM fixes.

omarchy's SSH hardening now works on OpenSSH 10.x [1]. The case-sensitive grep in omarchy-setup-security-sshd matched only lowercase keywords from sshd -T, but OpenSSH 10.x prints CamelCase, so the drop-in was judged ineffective and removed, leaving password authentication enabled. The case-insensitive match fixes that. The project also added a security policy and aligned it with website guidance [2][3]. The acceptance suite now covers the 4.0.2 security hardening, asserting closed session-to-root paths and exercising unattended SSH hardening end to end [4]. The kernel merge window continues with Julia Lawall's Coccinelle updates, including dropped rules for functions that no longer exist: atomic_long_dec_and_lock() never existed and vmalloc_exec() was removed [5][6][7]. ARM 7.3 updates include disabling broken eBPF on RiscPC and more BKPT fixes [8]. OpenRISC fixed an unchecked access in its or1k_atomic syscall that allowed arbitrary kernel memory access [9].

Action items

References

  1. [1] Match sshd -T keywords case-insensitively when verifying hardening ↗ basecamp/omarchy
  2. [2] Add security policy ↗ basecamp/omarchy
  3. [3] Match website security guidance ↗ basecamp/omarchy
  4. [4] Cover the 4.0.2 security hardening in the acceptance suite ↗ basecamp/omarchy
  5. [5] Merge tag 'cocci-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jlawall/linux ↗ torvalds/linux
  6. [6] coccinelle: atomic_as_refcounter: drop atomic_long_dec_and_lock ↗ torvalds/linux
  7. [7] coccinelle: kfree_mismatch: drop vmalloc_exec ↗ torvalds/linux
  8. [8] Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rmk/linux ↗ torvalds/linux
  9. [9] Merge tag 'for-linus' of https://github.com/openrisc/linux ↗ torvalds/linux

$ ls linux/reviews/ # the step-back reads

the week in review secretmem locked-page accounting fix lands the month in review Linux 7.2 closes and 7.3 opens amid kernel hardening and Omarchy's security push
Topics: Infrastructure Full archive →

Quick answers

What shipped in Linux on August 31, 2026?
omarchy's SSH hardening now works on OpenSSH 10.x, and the project added a security policy, while the kernel pulls in Coccinelle and ARM fixes. In total, 57 commits, 16 pull requests, and 1 releases landed.
Who contributed to Linux on August 31, 2026?
6 developers shipped this update, including Linus Torvalds, Sang-Heon Jeon, acrogenesis, Ryan Hughes, codefiles, and renovate.
What were the notable Linux updates?
Match sshd -T keywords case-insensitively when verifying hardening, Add security policy, and Match website security guidance.
♥

$ log Linux --recent

Omarchy hardens lock and sleep hook installs, restrains Kitty remote control 43 shipped Driver core, NVMe, LoongArch fixes land in 7.3-rc2; Omarchy gains OpenClaw app 26 shipped DRM fixes target Blackwell display, ceph nearfull_sync on remount 15 shipped secretmem locked-page accounting hole closed across Linux tree 15 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.