$ the-wire · showcase
SMB client fixes land for 7.3, Elsewhen becomes a default Omarchy plugin
By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology
A 7.3-rc4 pull request closes out-of-bounds reads and use-after-frees reachable from a hostile SMB server, while Omarchy promotes its world clock plugin to a default and moves PHP onto mise.
Merge tag 'cifs-fixes-7.3-rc4' of https://git.manguebit.org/linux torvalds/linux
Paulo Alcantara's batch fixes multiple out-of-bounds reads and use-after-frees in the SMB2/3 receive path, including a stale next_buffer pointer and an integer overflow in compound encrypted frame handling. He states the bugs are "reachable from a malicious or compromised server", which puts every machine that mounts untrusted CIFS shares in scope.
Merge tag 'ksmbd-for-7.3-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb torvalds/linux
ksmbd no longer drops valid sessions after ten seconds of inactivity when a new session setup request arrives; sessions now expire only on credential expiration, with stale unauthenticated ones cleaned up after a 45-second timeout. Compound requests also keep earlier responses when Query Info fails, so partial compound replies stop losing data.
Merge tag 'mmc-v7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/ulfh/mmc torvalds/linux
MMC and MEMSTICK pick up a set of use-after-free fixes across the core and host drivers: SDIO IRQ work, the hsq retry work, and mmci's busy-timeout work, plus an OF node reference leak on card add failure and a memory leak when the sdio_uart port table is full. Worth taking if you run eMMC or SDIO hardware on a kernel tracking 7.3.
Install Elsewhen, the world clock plugin, by default basecamp/omarchy
Elsewhen (omacom.elsewhen) ships as a default plugin from the elsewhen package, with fresh installs getting a symlink from ~/.config/omarchy/plugins/omacom.elsewhen to /usr/share/omarchy/plugins/omacom.elsewhen and the widget placed before the clock. A 12-line migration installs the package, creates the link only when no plugin path exists, and rescans plugins; the clock stays the center anchor.
Improves `php` and `laravel` installation basecamp/omarchy
The PHP and Laravel installation path moves to mise, giving Omarchy per-project versions and fast installs instead of the system-wide pacman package that was the only language handled that way. Elsewhere in the tail: hwmon corrections for cgbc-hwmon, gpioufan, hp-wmi-sensors, and the k10temp Zen5 Turin range, drm fixes spanning amdgpu, xe, msm, and a vblank pending event leak in core, and a new...
Action items
- → Update to a kernel carrying the CIFS 7.3-rc4 fixes if you mount untrusted SMB shares torvalds/linux [plan]
