$ the-wire · showcase
Overlayfs unprivileged bugs fixed, Omarchy sudo prompts collapse to one
By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology
Linux's overlayfs merge closes info leak, use-after-free and NULL deref bugs reachable by unprivileged users, while Omarchy rewrites how it asks for root.
Merge tag 'ovl-fixes-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/overlayfs/vfs torvalds/linux
Amir Goldstein's pull fixes bugs found by Chris Mason's AI review: an info leak, a use-after-free, NULL derefs, an RCU walk stall with remote layers and data loss with nfs_export, several reachable by unprivileged users. Copy up of files carrying an empty security.capability xattr, a state any user could set to block the operation, is fixed too.
Use ordinary sudo: one password for ten minutes, plain update scripts (#17000) basecamp/omarchy
Omarchy commands used to revoke sudo's timestamp on entry and exit and authenticate through a sudo -N wrapper, so one dev link session cost six prompts. It now ships timestamp_timeout=10 and drops both the revocation and the wrapper, keeping only omarchy update's single authorization and keepalive. This is a breaking change in how privileged steps authenticate.
Keep the screenshot picker from unbinding the user's own keys basecamp/omarchy
Taking one screenshot with the window picker used to delete any user bind on RETURN, CTRL + RETURN, TAB, CTRL + TAB or the arrow keys until the next hyprctl reload. In Hyprland 0.56 keybind:unbind() calls removeKeybind(modmask, key) rather than removing only its own handle, which Omarchy had assumed.
Carry omarchy-bar put past a timing-out shell basecamp/omarchy
Migration 1790042972 failed on every omarchy update while the running shell missed the 2s IPC window, aborting the 4.0.6 to 4.5 RC update. ask_to_put treated a transient "is not responding" as fatal on first attempt, and the fail killed the migration under set -e.
Merge tag 'power-utilities-2026.10.31' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux torvalds/linux
Turbostat 2026.10.31 removes the hard-coded 8192-CPU limit, fixes --cpu to work more than once and --Joules to work with --show power, and adds decoding of Uncore Frequency Agent Types plus dumps of RDT and RP config. The PMT mmap size and bounds check fix allows non-zero offsets and rejects mappings that run past the end of the region. Elsewhere, ALSA's sound-fix pull carries race fixes in PCM...
