Self-Hosted Weekly: Week 34, 2026. Linux 7.2, isolated-vm Escape, Go 1.27

Two sandbox escapes, a kernel release Linus almost didn't have time for, and a Go release that quietly swapped the engine under encoding/json while you weren't looking. If you run anything self-hosted, this week's list is less "interesting reading" and more "open a terminal."

KDE Gear 26.08 also shipped this week, refreshing Dolphin, Okular and Kdenlive, and Tails 7.11 fixed Persistent Storage activation. Neither made the cut below.

Let's get into it.

1. Linux 7.2 Lands With Cache-Aware Scheduling

Torvalds shipped 7.2 on Sunday, August 16, and the headline feature is a scheduler that finally understands cache topology. It co-locates tasks that share data inside the same Last Level Cache domain, which matters a lot if you're packing containers onto big multi-socket boxes.

Also in: a fairer GPU scheduler, Intel's USB4STREAM protocol, AMDGPU HDMI 2.1 FRL, Rust support on IBM s390, and initial Apple M3 support.

Torvalds on the crunch: "this last week of the release was, once again, bigger than I would have wished for, but hey, with the whole 'new normal' thing, if I delayed releases for that reason we'd probably never have a release at all."

Hot take: Cache-aware scheduling shows up as a few percent on your monitoring graphs and nowhere in your changelog reading. Worth it for dense container hosts. Not worth rushing a production kernel upgrade for.

2. isolated-vm Sandbox Escape Hits Everyone Running Untrusted JavaScript

This is the one to care about. Endor Labs researcher Cristian-Alexandru Staicu disclosed a type confusion flaw in isolated-vm's ExternalCopy handling of the transferList option. Code inside the sandbox can corrupt memory in the host process. Impact runs from segfault denial-of-service up to remote code execution via control-flow hijacking.

isolated-vm pulls nearly a million npm downloads a week, and it's the sandbox of choice for platforms running user-supplied JavaScript, which in 2026 means a lot of AI agent tooling. All versions through 7.0.0 are affected, patched in 6.2.0 and 7.0.1. Tracked as GHSA-864f-rcv7-6rh4, CVE pending.

Hot take: Staicu's framing is the part worth internalizing. V8 isolates held up fine. What broke was the C++ glue marshalling values across the boundary. If your threat model says "untrusted code is contained because we use a sandbox library," your threat model has a footnote you haven't read.

3. Docker's CopyEscape Flaw Turns docker cp Into a Host Write

Slightly older news that deserves a second pass because plenty of people missed it. CVE-2026-17106, nicknamed CopyEscape and found by the Imperva Red Team, is a TOCTOU race in moby/go-archive. A malicious container can manipulate the tar stream so that the Docker CLI, resolving directory entries through absolute symlinks during extraction, writes files anywhere the user running docker cp can write.

Hot take: docker cp always felt like a debugging convenience rather than a security boundary, and now there's a CVE that agrees. The AI-agent angle is the uncomfortable part: sbx cp in Docker Sandboxes is affected too, and that's exactly how autonomous tooling moves files out of a container.

4. Go 1.27 Ships Generic Methods and a New JSON Engine

Go 1.27 landed August 19 with generic methods, faster small-object allocation, goroutine leak profiles, post-quantum ML-DSA signatures in crypto/mldsa, and a uuid package in the standard library.

The one to read carefully is encoding/json/v2. It's a full revision with variadic Options on every entry point, and critically, the classic encoding/json is now backed by the v2 implementation.

Hot take: "Same API, new engine underneath" is where upgrade surprises live. If you self-host Go services with strict JSON contracts, read the v2 notes on defaults before you bump the toolchain, not after your first weird unmarshal in production.

5. Firefox 154 Makes Websites Ask Before Touching Your LAN

Mozilla extended Local Network Access protections to WebSockets. A public website that wants to open a WebSocket to something on your local network now triggers a permission prompt instead of connecting silently. Firefox 153 brought LNA to regular requests; 154 closes the WebSocket hole.

Hot take: A genuinely good default that will also break something in your homelab. Anything with a browser-based UI talking to a LAN service over WebSockets will start asking permission. That's the trade, and it's the right one.

6. Rust Momentum: 1.98 Ships, Canonical Funds C-to-Rust Research

Rust 1.98 arrived August 20 with algebraic_add, algebraic_sub, algebraic_mul, algebraic_div and algebraic_rem for f32 and f64. They tell the compiler it may reorder operations under normal algebra rules, roughly what -ffast-math does in C, which unlocks loop vectorization that strict left-to-right evaluation blocked. Integer formatting also got a format_into method with NumBuffer, benchmarking on par with the itoa crate.

Separately, Canonical is funding a three-year project with the University of Bristol on automated C-to-Rust translation, co-funded by UK Research and Innovation. AppArmor and snap-confine are the case studies.

Hot take: Read the Canonical item carefully before you get excited. This is a PhD research project starting later in 2026, and Canonical is explicit that AppArmor and snap-confine are not being rewritten. It's a bet on tooling, not a migration announcement.

7. WordPress 7.1 "Mary Lou" Lands at WordCamp US

WordPress 7.1 shipped August 19, timed to WordCamp US. Responsive styling and pseudo-state controls (hover, focus, active) are now editor controls in the Site Editor rather than custom CSS. Notes gained suggestion mode, rich text and emoji reactions. There's a new media editor modal, plus two new core blocks: Tabs and Playlist with waveform visualization.

Hot take: Moving hover and focus states out of custom CSS is the change that actually reduces support tickets. Everything else is nice; that one changes who can edit a theme without breaking it.

8. RPM 6.1 Adopts a Kernel-Style Release Cadence

RPM 6.1 landed August 20. The number getting quoted is a 26% cut in installation time, though that comes specifically from closing file descriptors more efficiently and only applies on kernel 5.11 or newer with glibc 2.34 or later. Signing gained PKCS#11 token support for HSM and smart card workflows, NSS-based user and group lookups are back on by default, and the keystore no longer shares the transaction lock, fixing a 6.0 regression that froze database queries mid-transaction.

Hot take: The release cadence is the real news. RPM is moving to predictable biannual releases on a kernel-inspired model, which for anyone packaging software is worth more than any single performance number.

What We're Watching Next Week

Kubernetes v1.37 is scheduled for Wednesday, August 26. The release candidate is already out with API and kubelet additions. If you run managed clusters, check your provider's adoption timeline before you plan anything around it.

Also worth tracking: whether the isolated-vm advisory picks up a CVE identifier, and how quickly the AI agent platforms that depend on it ship patched builds.

The Bottom Line

Two of this week's stories are sandbox escapes, and both landed on the same assumption: that the isolation layer you bought is the isolation layer you got. isolated-vm's V8 boundary held while the glue code around it didn't. Docker's container boundary held while the CLI helpfully followed a symlink out of it.

Patch isolated-vm and Docker today. Read the Go 1.27 JSON notes before you upgrade. Leave the kernel for a maintenance window.

If you'd rather not track patch levels across a dozen services by hand, that's precisely the problem Elestio's managed deployments exist to solve: automated updates, backups and monitoring on infrastructure you still own.

Thanks for reading ❤️ See you next week 👋