A major kernel release, a security-focused OpenSSH update, and a state law with OS-level implications for Linux shaped the week.
Top Stories
- Illinois law makes OS vendors responsible for built-in age signaling by 2028, with no open source carve-out — Illinois Public Act 104-0664 (HB5511), signed July 31, requires every “operating system provider” to add an age-declaration step and expose an encrypted API that returns an age bracket (under 13, 13-15, 16-17, 18+) on request by July 1, 2028; unlike Colorado’s fix and California’s pending fix, the Illinois text adds no exemption for open source distributions and projects, and lists penalties up to $7,500 per affected child in the bill (the governor’s press release says “up to $50,000 per violation”). This matters to distros, desktop environments, community app stores, and vendors shipping Linux in Illinois because it sets a compliance clock and shifts age-signal responsibility down to the OS layer.
- Linux 7.2 is now mainline (2026-08-16) — Kernel.org lists “mainline: 7.2 2026-08-16” with source tarballs, PGP signatures, and diffs; this is the new baseline for downstreams and users who track mainline. Expect distro integration work and out-of-tree driver/module updates to follow the v7.2 tag.
- OpenSSH 10.5 released (2026-08-11) with multiple security fixes and small features — The release notes highlight an ssh-agent fix where agent locking plus session-bind could allow operations intended for local-only use to be performed remotely, and a client realloc use-after-free fix when adding a remote forwarding during a pending open request; new bits include “ssh -Z” to print the public keys that will be tried and the ability to tweak FIDO key trial order. Admins running OpenSSH 10.4 or earlier should plan to update.
Security Watch
- OpenSSH 10.5 addresses ssh-agent locking/session-bind interaction and other issues — Affects users forwarding agents and those relying on key restrictions; update to 10.5 (portable: 10.5p1, released 2026-08-11) to pick up the ssh-agent fix (“operations intended to be limited to local use only could be performed remotely”) and other hardening and bugfixes noted in the upstream release notes.
Releases & Updates
- Linux 7.2 mainline release — New mainline kernel tagged on 2026-08-16; source tarballs, signatures, and diffs are available for integrators and testers.
- OpenSSH 10.5/10.5p1 — Security-driven point release with agent, client, and server fixes; adds “ssh -Z” and other quality-of-life improvements.
Worth Reading & Trying
- Illinois HB5511 explainer for OS vendors and Linux projects — Clear breakdown of timelines (Jan 1/July 1, 2028), the OS-level age API requirement, bracket semantics, enforcement scope (Illinois AG), and the lack of an open source exemption that Colorado added and California is pursuing.
From LinuxBlog.io
- A Guide to Linux /proc Filesystem - Learn how the Linux /proc filesystem works and how to read /proc/meminfo, /proc/cpuinfo, /proc/stat, /proc/net, and /proc/PID directly for troubleshooting, monitoring, and scripting without installing anything.
Have something to add or clarify? Share updates, real-world impacts, or fixes you’re tracking in the replies below.
Our community remains free of banner ads thanks to our partnership with Better Stack.
Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com