OpenZFS flaws unfixed, DuckDB 2.0 preview, Xen safety arm
Eight unfixed OpenZFS flaws go public with no CVE ids, DuckDB previews 2.0, the Rust pull for Linux 7.3 carries GCC backend fixes, and Xen gains a safety arm.
✍️ From Editor
The Rust pull for 7.3 carries only build fixes for a GCC backend, and eight OpenZFS holes went public unfixed and unnumbered, so anyone on ZFS is on their own. I wrote about the release that made Rust official:
Linux 7.0: One Bash Script. One Weekend. 23 Years of Kernel Bugs.
☕ Support FossDaily on Ko-fi and keep it free, daily and independent.
🖥️ Apps & End User
Zotero 10 adds undo, batch editing and a reflowable PDF mode
The reference manager shipped Zotero 10 on 17 August 2026 with undo, batch editing of many items, accent-insensitive search, and a reflowable PDF reading mode.
🏠 Self-Hosting & Homelab
SeaweedFS 4.42 makes the master send only the volumes that changed
The distributed object store released 4.42 on 17 August 2026, so volume heartbeats carry only changed volumes and interrupted erasure coding jobs roll back.
🐧 Linux Kernel
The Rust pull for 7.3 asks to merge the first fixes for a GCC backend
Miguel Ojeda asked Torvalds on 16 August 2026 to merge Rust changes for 7.3 including two build fixes for the upcoming Rust GCC backend, rustc_codegen_gcc.
The fscrypt pull for 7.3 asks to replace two encryption paths with one
Eric Biggers asked Torvalds on 17 August 2026 to merge changes to fscrypt, kernel file encryption, that cut 1,246 lines and leave inlinecrypt controlling only hardware use. Encrypted ext4 and f2fs would run one tested path instead of two.
The kernel documentation pull would drop the model name from the AI disclosure tag
Jonathan Corbet asked Torvalds on 17 August 2026 to merge 7.3 documentation that removes the model name from the Assisted-by tag used to declare help from a language model. Contributors would get one AI disclosure tag, no model name.
📦 Distros & Desktop
Plasma 6.8 will share the remote desktop clipboard both ways (4 minute read)
KDE reported on 15 August 2026 that Plasma 6.8 remote desktop sessions will carry a fully shared clipboard rather than only the server clipboard reaching the client. Text copied on your machine would paste straight into the remote session.
🧰 Languages & Dev Tools
Biome 2.5.9 flags unlabelled buttons and fixes HTML lines that overrun
Biome, the JavaScript linter, shipped 2.5.9 on 17 August 2026 with five new nursery rules, including one that reports interactive elements with no label. Buttons and inputs missing a label get caught in a normal lint run.
Making a compiler cache hit inside a sandbox cut a large build to 20 seconds (11 minute read)
Jasmine Tang wrote on 8 August 2026 about making sccache, a compiler cache, hit under sandboxed builds by stripping changing sandbox paths before hashing. Sandboxed builds keep their cache, cutting one large repository from 155 seconds to 20.
🐳 Cloud Native & Infra
Chaos runs get a resiliency score instead of a pass or fail (6 minute read)
Red Hat described on 17 August 2026 how the Krkn Operator, a developer preview, runs CNCF Krkn failure experiments across many clusters and scores resilience from Prometheus metrics.
Dapr unsticks workflows that stalled after the last worker disconnected
Dapr, a distributed application runtime, shipped 1.18.3, 1.17.13 and 1.16.19 on 14 and 15 August 2026, with 1.18.3 fixing sixteen bugs including workflows stalling after the last worker disconnects. Workflows that hung until a restart now recover on their own.
🗄️ Data & Databases
DuckDB previews 2.0 with a client server mode, triggers and a new parser (15 minute read)
DuckDB, the analytics database, previewed 2.0 on 17 August 2026, listing a client-server protocol, triggers, a new storage format and a rewritten SQL parser. You can test storage and parser changes in preview builds before the fall release.
QuestDB streamed 500 million rows into Apache Arrow in 2.3 seconds (18 minute read)
QuestDB, a time series database, published a benchmark on 7 August 2026 showing it moved 500 million rows into Apache Arrow in 2.3 seconds. QuestDB measured it with eight parallel readers on 32 vCPU AWS instances and published the harness.
🤖 AI, ML & LLM
vLLM streams model layers across devices to serve video models that do not fit (20 minute read)
vLLM, the inference server, published layerwise offload on 17 August 2026, tested on 64 GB Ascend 910B3 cards with a 64 billion parameter video model needing 124 GB.
How llm-d routes an inference request from gateway to vLLM pod (12 minute read)
Red Hat explained on 13 August 2026 how llm-d, Kubernetes inference routing, sends a request through an Envoy gateway to the vLLM pods behind it.
📊 Observability & Networking
Prometheus 3.14.0 fixes silent data loss in a compaction setting
Prometheus 3.14.0 landed on 17 August 2026, turning PromQL duration expressions on by default and fixing silent storage data loss when the stale series compaction threshold is set.
Open vSwitch 4.0.0 drops all Windows support and takes segmentation offload out of experimental
Open vSwitch, a software switch, released 4.0.0 on 17 August 2026, removing all Windows support and dropping the experimental tag from userspace segmentation offload.
Polar Signals joins Dash0 and says Parca stays open source (6 minute read)
Polar Signals announced on 17 August 2026 that it is joining Dash0, and said Parca, its continuous profiling project, stays open source with the same team maintaining it.
🔐 Security & CVEs
Eight unfixed OpenZFS flaws are published with no CVE ids assigned
Erica Windisch published eight unfixed flaws in OpenZFS on Linux on 16 August 2026, covering pool authorization inside unprivileged user namespaces and on-disk metadata parsing. Administrators can keep unprivileged containers away from /dev/zfs today.
LyX 2.5.2 closes nine ways a crafted document can reach a shell
LyX, a LaTeX document editor, released 2.5.2 on 17 August 2026, fixing nine flaws that reach external tools on open or export, plus two hardening gates.
⚖️ Licensing, Foundations & Policy
Xen forms a safety committee and moves to five years of release maintenance
The Linux Foundation announced a safety committee for Xen, an open source hypervisor, on 17 August 2026, with AMD, EPAM and Renesas sharing certification artifacts. Anyone shipping Xen can plan five years ahead: three regular and two security-only.
🔌 Hardware, RISC-V & Embedded
A field guide to picking a log daemon for an embedded Linux device (15 minute read)
Grace Henderson published a guide on 13 August 2026 comparing BusyBox syslogd, rsyslog, syslog-ng, journald and Fluent Bit for embedded Linux devices.
🎮 Gaming & Graphics
Godot pushes a 4.7.2 stable tag ahead of its announcement post
The 4.7.2-stable tag for Godot, a game engine, landed on 17 August 2026, and its release candidate carried 43 improvements including a Windows high polling rate mouse performance fix.
💎 Gems & Repos
listmonk is a self-hosted newsletter and mailing list manager that ships as a single Go binary with a dashboard, with commits through 17 August 2026. Running your own list needs one process and a Postgres database, as long as if you can manage email address security.
Strix runs autonomous agents that attack a running application and return a working proof of concept rather than a warning, under Apache 2.0 with commits through 17 August 2026.
NautilusTrader is an event driven trading engine written in Rust with Python strategy bindings, so backtests and live runs share one code path, with commits through 18 August 2026.
⚡ Quick Links
Linux 7.2 is the current mainline and the 7.3 merge window is open: linux-next sits at next-20260817, and 7.3-rc1 closes the window, so testers know which tree carries 7.3 work.
OSI asks how its board should be chosen: the licence steward opened a governance survey on 17 August 2026 after pausing elections, so answers can land before September recommendations reach the board.
Coolify 4.3.7 fixes backups that skipped databases: the deployment platform shipped its fifth patch in three days on 17 August 2026.
Debian turns 33: Debian marked 33 years on 16 August 2026, and its how-can-i-help package lists open bugs in software you already run.
☕ Support FossDaily on Ko-fi and keep it free, daily and independent.
Got an article worth included, a correction, a project we missed, or just say hi 👋 ? Write to c@fossdaily.org.