Curl CVEs and OpenWrt device work

Curl 8.22.0 delivered fixes for ten CVEs while OpenWrt advanced several MediaTek device ports and a new LuCI theme. Fedora Discourse nesting tests and a Debian copyright-years debate filled out the day.

Curl 8.22.0 fixes ten CVEs

The curl project released version 8.22.0 with security advisories covering ten separate CVEs in libcurl, wcurl and related components. The update addresses issues that affect a widely used transfer library and its tools. Developers integrating curl should treat the release as a priority security update.

OpenWrt snapshots gain GL.iNet BE10000 support

OpenWrt snapshot support was merged for the GL.iNet BE10000 (Slate 7 Pro), built on the MT7987A SoC with Wi-Fi 7 including 6 GHz. Touchscreen and panel UI work is already underway. The addition expands early access to a current Wi-Fi 7 platform inside the OpenWrt tree.

Fedora Discourse tests nested replies

Fedora Discourse users exercised nested replies and reported UX problems with unread tracking and threading behavior. A Discourse developer replied directly with feedback in the same thread. The exchange surfaces concrete limits of the feature for large project forums.

ath11k AQL and ATF patches reviewed

An OpenWrt forum thread examined ath11k AQL and ATF patches together with offload TBF design notes. Toke Høiland-Jørgensen supplied feedback on the approach. The discussion matters for airtime fairness and queue management on modern ath-based radios.

Footstrap theme offered for LuCI

A new LuCI theme named Footstrap was announced on the OpenWrt forum and described as twice as fast as the bootstrap theme. A long thread recorded adoption interest plus minor UI comments. Theme authors and OpenWrt operators now have another lightweight option to evaluate.

Zyxel Armor G5 port advances

Pull request 24881 adds LED, fan, Bluetooth and sensor support for the Zyxel NBG7815 (Armor G5), completing the remaining pieces of the device port. Community work is finishing hardware enablement for this router. Owners gain a more complete OpenWrt experience once the changes land.

Early GL.iNet Flint 4 port posted

Blogic published an early OpenWrt port for the GL.iNet Flint 4 based on the MT7988 SoC. The Motorcomm YT8824 PHY driver is still missing. The tree continues to expand MediaTek Wi-Fi 7 device coverage despite the remaining gap.

Debian debates copyright years in d/copyright

Debian packagers discussed whether lintian should require copyright years in d/copyright when upstream omits them, weighing US legal practice against maintenance cost. The debian-devel thread examines the packaging policy tradeoff. Maintainers of packages without upstream year markers have a direct interest in the outcome.