Linux 7.2 Released, KDE Plasma Gains Three Year LTS Support
Linux 7.2 ships as the 7.3 merge window opens, KDE funds a three-year Plasma LTS, Homepage 2.0 adds a login, and Lemonldap::NG patches an SSO login bypass
✍️ From Editor
Linux 7.2 shipped on 16 August, and 7.3 opened the next day with 40 pulls waiting, so patch the Lemonldap::NG bypass tonight. AutoGPT now gates AI-written pull requests; pressure Jakub Kicinski answered by deleting the code:
Linux 7.1: Kicinski Called It ‘LLM-pocalypse.’ Then Deleted 138,000 Lines.
☕ Support FossDaily on Ko-fi and keep it free, daily and independent.
🏠 Self-Hosting & Homelab
Homepage 2.0 adds built-in authentication and new widgets
Homepage, the homelab dashboard, shipped 2.0.0 on 14 August 2026 with built-in authentication, an MCP endpoint, and Syncthing, Duplicati and Maintainerr widgets. Dashboards can sit behind their own login instead of a separate reverse proxy auth layer.
Mastodon sets trademark rules for server domain names (5 minute read)
Mastodon, the federated network, published trademark guidelines on 12 August 2026 barring “mastodon”, “masto” and “mstdn” in top-level and second-level domains, grandfathering domains existing before 13 May 2026.
🐧 Linux Kernel
Linus Torvalds releases Linux 7.2 and opens the 7.3 merge window
Linus Torvalds released Linux 7.2 on 16 August 2026, and the 7.3 merge window opened the next day with 40 pull requests already queued.
A 57 patch series would let the kernel collapse huge pages partially
Kiryl Shutsemau of Meta posted a 57 patch RFC on 16 August 2026 that would let the kernel collapse part of a page table instead of all or nothing. Fewer applications would stall while the kernel builds huge pages.
Red Hat traces a large throughput loss to a scheduler feature (9 minute read)
Sayali Bhavsar reported on 4 August 2026 that a scheduler randomization feature cut throughput in CockroachDB, the distributed database, by up to 93 percent on one AWS instance. One debugfs write turns the feature off and restores the lost throughput.
📦 Distros & Desktop
KDE, Kubuntu Focus and Techpaladin back a three year Plasma LTS
KDE, Kubuntu Focus and Techpaladin announced Bullet Proof KDE on 13 August 2026, promising three years of fixes for Plasma 6.6 LTS, Frameworks and Gear. Kubuntu 26.04 users keep one Plasma version for three years and still get patches.
An Ubuntu tool assembles Main Inclusion Review evidence (11 minute read)
Christian Ehrhardt introduced Auto-MIR on 13 August 2026, a beta tool that gathers dependency graphs, lintian output and CVE history inside a clean LXD guest. Reviewers get the evidence assembled up front while a human still casts every approval.
🧰 Languages & Dev Tools
The Rust standard library now runs an API breakage linter (12 minute read)
Predrag Gruevski described on 15 August 2026 how cargo-semver-checks, an API linting tool, now runs against the Rust standard library, naming four past breakages it would have caught.
pnpm 11.22 caches Node runtime metadata with signature verification
pnpm, the Node package manager, shipped 11.22 on 15 August 2026, caching Node.js runtime metadata per version with signature verification.
🐳 Cloud Native & Infra
Flux ignore rules stop drift correction fighting other controllers (8 minute read)
Flux, the GitOps controller, explained its ignore API on 3 August 2026, which excludes chosen field paths from drift correction using Strip or Adopt strategies. Autoscaler replica counts stop ping-ponging against Flux on every reconcile.
🗄️ Data & Databases
The layout that decodes 8, 16, 32 and 64 bit deltas in parallel (11 minute read)
David Anderson explained on 8 August how FastLanes, a compression research project, transposes blocks of 1,024 values into independent SIMD streams.
nanoarrow 0.9.0 adds dictionary decoding and LZ4 reads
Apache Arrow released nanoarrow 0.9.0 on 14 August 2026, adding dictionary decoding to its IPC reader and LZ4 decompression to the R and Python bindings. R and Python users can now read LZ4-compressed IPC streams that those bindings previously rejected.
🤖 AI, ML & LLM
An open leaderboard benchmarks OCR models on antiqua book pages (13 minute read)
FineBooks published a 2,165-page ground truth set, an open eval harness, and a leaderboard on 10 August, scoring 14 open-weight models on Antiqua print in four languages. Anyone digitizing Antiqua print can pick a model based on measured accuracy.
📊 Observability & Networking
Alertmanager 0.34.0 adds server side silence filtering
Alertmanager, the Prometheus alert router, shipped 0.34.0 on 16 August 2026 with server side silence filtering by state and templatable alert route labels. Operators can query only the active silences instead of fetching every one the cluster holds.
Turning Kubernetes admission decisions into metrics (14 minute read)
Diana Todea and Cortney Nickerson showed on 12 August 2026 how to scrape admission metrics from Kyverno, a Kubernetes policy engine, into VictoriaMetrics and Grafana.
🔐 Security & CVEs
Lemonldap::NG patches an unauthenticated single sign on bypass
CVE-2026-19349, disclosed 16 August 2026, lets an unauthenticated visitor replay a state id as a session on Lemonldap::NG, an SSO portal, using GitHub or LinkedIn login. Upgrading to 2.16.9, 2.21.5 or 2.23.3, whichever fits your branch, closes the bypass.
GitHub extends malware advisories past npm to more ecosystems (6 minute read)
GitHub detailed on 6 August 2026 how it imports OpenSSF’s malicious packages repository, which holds over 15,000 reports, into its advisory database. Dependabot alerts now cover seven more ecosystems: PyPI, Maven, RubyGems, NuGet, Go, crates.io and Composer.
⚖️ Licensing, Foundations & Policy
A maintainer explains his guardrails for AI written pull requests (9 minute read)
A 12 August 2026 interview with Nicholas Tindle of AutoGPT, an agent framework, covers AGENTS.md placement, strict pull request templates and CLA enforcement. Maintainers facing agent generated contributions get a set of repository rules already in use at AutoGPT.
🔌 Hardware, RISC-V & Embedded
Simulation dashboards now cover hundreds of Zephyr and U-Boot boards (5 minute read)
Antmicro reported on 12 August 2026 that 926 of 1,513 Zephyr platforms and 829 of 1,373 U-Boot targets now pass in its Renode simulation dashboards. The new Run in Renode button boots a listed board demo without the hardware.
🎮 Gaming & Graphics
GIMP plans a zipped XML project format to replace binary XCF (9 minute read)
GIMP’s 16 August 2026 development update details a planned zipped XML project format to replace binary XCF, plus spectral blending for MyPaint brushes.
💎 Gems & Repos
tinyauth An OpenID certified authentication server in Go that puts a login in front of Traefik, Caddy or nginx services, AGPL-3.0 with its last commit on 16 August 2026. A homelab gets single sign on without running an identity stack.
grimmory A self-hosted library for ebooks, comics and audiobooks, built on Spring Boot with OPDS and OpenID Connect, AGPL-3.0 with its last commit on 17 August 2026. One server covers all three media types and existing reader apps connect directly.
NetAlertX A network scanner that keeps an asset inventory and alerts on new or changed devices, GPL-3.0 with custom ntfy notification headers added on 16 August 2026. An unknown device joining the network triggers an alert on the next scan.
⚡ Quick Links
Home Assistant 2026.8.2 lands 35 changes: shipped 14 August 2026 with Matter, Mikrotik, Reolink and SMTP fixes, which means those faults clear without waiting for the next monthly release.
LightDM 1.33.1 restores broken user switching: the display manager released 1.33.1 on 16 August 2026, and anyone who upgraded to 1.33.0 gets user switching back.
mise v2026.8.6 adds resumable downloads: the version manager shipped on 14 August 2026 with resumable downloads and monorepo task fixes, so an interrupted download picks up where it stopped.
croc 11.0.3 fixes arbitrary file deletion: reported 14 August 2026 in the encrypted transfer tool, affecting 10.0.13 through 11.0.2, so a malicious sender cannot delete files outside the download directory.
Ollama v0.32.14 transcodes WebP for vision requests: the local model runner shipped on 15 August 2026, which lets WebP images feed local vision models without manual conversion.
Python names 17 Packaging Council nominees: five inaugural seats announced 13 August 2026, voting 1 to 15 September, and anyone publishing to PyPI sees who may set packaging policy.
☕ Support FossDaily on Ko-fi and keep it free, daily and independent.
Got an article worth included, a correction, a project we missed, or just say hi 👋 ? Write to c@fossdaily.org.