OpenWrt security and GPON work, Fedora process fights

OpenWrt shipped a service release that closes remotely triggerable flaws in default network services and advanced a draft for first GPON support on Econet hardware. Fedora debated locking Change discussions to the devel list, while Nix and Arch saw smaller tooling and maintainer shifts.

OpenWrt 24.10.8 closes remote network flaws

OpenWrt published the 24.10.8 service release. The update fixes multiple remotely triggerable vulnerabilities in default network services. Operators running stock configurations have a concrete reason to upgrade before those services are probed.

Draft OpenWrt GPON driver for Econet EN7528

A draft pull request adds OpenWrt support for the Zyxel PMG5617GA and related Econet SoCs. It supplies the first GPON/xPON driver for the Econet EN7528, including working OLT tests and hardware offload. The work would bring fiber ONT platforms into OpenWrt that previously lacked usable mainline coverage.

nix-archive 0.1 ships as standalone Rust NAR library

nix-archive 0.1 was released as a standalone Rust implementation of the NAR format. The author reports roughly 2.2x speedup relative to CppNix, and the thread examined the practical friction of upstream integration. Faster, reusable NAR handling matters to anyone packaging or mirroring Nix store contents outside the full CppNix stack.

Fedora proposes devel-list-only Change discussions

A Fedora 46 Change proposal would confine substantive Change discussion to the devel mailing list and treat Discourse threads as read-only announcements. The thread drew broad participation and exposed strong disagreement over platform preference and who can effectively join governance debates. The outcome will shape how future packaging and feature Changes are scrutinized.

NixOS probes dropping setuid from unix_chkpwd

A NixOS contributor examined whether unix_chkpwd must remain setuid and explored capabilities as a replacement. The discussion also surveyed real-world unprivileged PAM callers that might break under a stricter model. Reducing setuid surface remains relevant for anyone hardening multi-user NixOS systems.

Fedora revisits AI features in packages

Fedora contributors discussed packages that ship AI-powered features, noting a preference for opt-in defaults. The exchange revived a year-old stalled AI policy draft. Clear packaging norms would help maintainers decide how far automated or model-backed functionality may land by default.

Arch names new mkinitcpio maintainer

Arch Linux announced nl6720 as the new maintainer of mkinitcpio after the previous maintainer resigned. Continuity for the initramfs generator matters to every Arch installation that rebuilds early-boot images.

OpenWrt 25.12.5 brings DHCPv6 regressions

Users reported DHCPv6 and IPv6-PD breakage after the OpenWrt 25.12.5 service release. One related package fix was noted in the thread. Sites relying on prefix delegation need to verify behavior before rolling the update widely.