Go
DEV.SIMD MERGES INTO 1.27, COMPILER OPTIMIZATIONS SHIP
Go's SIMD experiment landed in master overnight, bringing new WebAssembly operations and compiler improvements that will ship in Go 1.27.
read --wire →
$ tail -f topics/infra.log
Infrastructure news, every morning.
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
Your week in Infrastructure, every Monday.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Recent wires
Linux
KERNEL FIXES LAND AHEAD OF 7.1 RELEASE
Three critical fixes merged into mainline overnight: HPFS crash on corrupted filesystems, device mapper allocation failures under pressure, and a bootconfig memory leak.
read --wire →
Arch Linux
BUILDBTW SHOW LANDS IN MAIN, FOUNDATION GETS LEANER
The buildbtw toolchain shipped its show command yesterday, cutting dead test code and landing a significant CLI overhaul that clears the way for the next phase.
read --wire →
HashiCorp
TERRAFORM AZURE PROVIDER GAINS BROAD SERVICE COVERAGE ACROSS 5 PULL REQUESTS
HashiCorp shipped five separate PRs expanding terraform-provider-azurerm support across services S through W, while Packer's Amazon plugin fixes critical retry failures.
read --wire →
Kubernetes
K8S 0.35.5 ROLLS ACROSS THE STACK
Kubernetes 0.35.5 is propagating through core dependencies across node-problem-detector, cloud-provider-vsphere, and test infrastructure, along with a batch of routine security and testing updates.
read --wire →
Go
SSH MALICIOUS SERVER CRASH, CORRUPT DATA MEMORY BOMBS PLUGGED ACROSS STDLIB
A single malformed packet from an SSH server crashes any Go client outright, while three separate stdlib bugs silently consume unbounded memory on corrupt input.
read --wire →
Linux
KERNEL EMERGENCY FIXES ACROSS KVM, X86, AND REAL-TIME SUBSYSTEMS
Linus pulled five critical fix sets overnight addressing memory leaks, SEV guest failures, and real-time kernel regressions that block stable deployments.
read --wire →
Arch Linux
LINUX KERNEL MOVES TO STABLE, VARNISH REMOVED FROM EXTRA
The latest kernel is out of testing and into production repositories, while the package roster gets pruned and vinyl-cache graduates from the testing pipeline.
read --wire →
HashiCorp
TFE TOKEN POLICY LANDS, CONSUL K8S 2.0 BREAKS GROUND, SECURITY PATCHES ROLL
Terraform Enterprise gains token TTL enforcement while Consul K8s ships its biggest breaking change yet, and three separate security updates patch Go vulnerabilities across the platform.
read --wire →
Kubernetes
KOPS PROMOTES KUBERNETES VERSIONS TO STABLE ACROSS RELEASE CHANNELS
Kops pushed its alpha Kubernetes versions to stable, signaling confidence in the latest release suite for production clusters.
read --wire →
Linux
KSMBD FIXES LAND AS BTRFS SQUOTA GETS PATCHED
Linux 7.1-rc5 ships critical SMB server and filesystem fixes overnight, with ksmbd addressing security descriptor validation and btrfs closing gaps in quota tracking that could silently corrupt accounting.
read --wire →
Arch Linux
SIGNSTAR TEARS DOWN STATE COMPARISON LAYER IN MAJOR REFACTOR
Arch's signing infrastructure is simplifying its state handling system, removing the legacy StateHandling mechanism in favor of a cleaner StateDiff approach.
read --wire →
HashiCorp
CONSUL AND DATAPLANE 2.0 SHIP WITH CRITICAL CRYPTO PATCHES
HashiCorp shipped major versions across Consul, Consul-K8s, and Consul Dataplane overnight, all patching the same cryptographic vulnerabilities that hit the Go ecosystem this spring.
read --wire →
Kubernetes
KUBERNETES DOCS EXPAND GLOBALLY WHILE INFRASTRUCTURE HARDENS
Japanese and Russian translations of core security documentation shipped overnight, while the platform infrastructure tightens with distroless base images and Go 1.27 compatibility fixes across the stack.
read --wire →
Linux
KERNEL RC5 CLOSES CRITICAL GAPS IN SMB, IO_URING, AND POWER MANAGEMENT
Linus pulled three major subsystem fixes overnight that address use-after-free vulnerabilities, uninitialized data leaks to userspace, and frequency computation bugs that affect millions of Intel workstations.
read --wire →
Arch Linux
KERNEL 7.0.9-ARCH2 LANDS WITH CRITICAL SECURITY AND NETWORKING FIXES
Arch Linux kernel patches hit the wire overnight, addressing unprivileged namespace vulnerabilities and fixing a malformed scatterlist bug that could corrupt memory buffers.
read --wire →
HashiCorp
TERRAFORM GOOGLE-BETA REVERTS TWO BROKEN CHANGES AS NOMAD STACK CUTS NIGHTLY BUILDS
Two critical reverts hit terraform-provider-google-beta overnight after recent commits broke test suites across multiple packages, while HashiCorp's Nomad ecosystem continues daily development snapshots.
read --wire →
Kubernetes
CRYPTO LIBRARY PATCH ROLLS ACROSS THE STACK AS CEL ADMISSION POLICY GETS CPU TURBO
golang.org/x/crypto v0.52.0 is landing everywhere to silence security scanners, while Kubernetes optimizes CEL admission evaluation to cut CPU overhead on high-throughput clusters.
read --wire →
Go
GO CORE FIXES METRIC READS, STRCONV BUG, AND S390X LINKAGE
The runtime/metrics package now has a test ensuring no stop-the-world pauses during Read calls, while the standard library patches a strconv output bug and fills gaps in S390X socket assembly exports.
read --wire →
Linux
EROFS CRASHES AND RCU REGRESSIONS HIT KERNEL RC
The kernel RC cycle just hit two critical bugs: erofs is leaking memory and crashing on unaligned extents, while RCU's SRCU implementation is queuing work on CPUs that may never wake up.
read --wire →