OpenWrt security releases and Fedora Changes debate

OpenWrt shipped a service release addressing remotely triggerable flaws in default network services, while Fedora contributors argued over confining the Changes process to the devel list. Other threads covered switch driver consolidation, upgrade regressions, Ubuntu secure boot plans, and a Nix cache analysis tool.

OpenWrt 24.10.8 patches remote network service flaws

OpenWrt published the 24.10.8 service release, which fixes multiple remotely triggerable vulnerabilities in default network services. The update matters for anyone running OpenWrt on exposed or multi-user networks, since the affected components ship enabled by default. Operators should treat the release as a priority security update rather than a routine point bump.

Fedora proposes locking Changes talk to the devel list

A Fedora 46 Change proposal would confine substantive discussion of the Changes process to the devel mailing list and make the corresponding Discourse category read-only announcements. The idea drew a lengthy, heated exchange on Discourse and a shorter technical thread on the list itself, with participants warning that the shift could alienate contributors who prefer the web forum. The outcome will shape how future packaging and policy changes are debated across the project.

OpenWrt adds RTL8367S-VB support via rtl8365mb DSA

Developers posted patches and test builds that fold RTL8367S-VB (0x6642) support into the existing rtl8365mb DSA driver, aiming to cut the number of separate Realtek switch drivers in the tree. The work targets OpenWrt users with boards that carry that particular switch silicon. Consolidating the drivers should simplify maintenance and reduce duplication for future hardware enablement.

OpenWrt 25.12.5 upgrade reports IPv6 and DDNS breakage

After the 25.12.5 service release, users reported IPv6 lease recovery failures and DDNS ucode syntax errors. The problems appear linked to a recent LuCI commit that shipped in the update. Anyone who has already upgraded or is planning to should watch for corrected packages or temporary workarounds before relying on those features.

Ubuntu 26.10 secure boot plans meet sealed-cmdline friction

Discussion on the Ubuntu Discourse examined secure boot changes planned for 26.10 in light of problems already seen with the sealed cmdline under TPM full-disk encryption on 26.04. Participants noted that the current sealed cmdline breaks hardware workarounds and custom server setups. The thread underscores the tension between tighter measured-boot guarantees and the flexibility many server and embedded users still need.

Residual talk after Debian LLM general resolution withdrawal

A short debian-devel thread continued after the withdrawal of a general resolution on LLM usage in Debian. Contributors briefly revisited review risks and how the New Maintainer process might handle AI-assisted contributions. The exchange stays technical and does not reopen the formal GR.

nix-weather-hs checks cache hits for unbuilt Nix graphs

An author announced nix-weather-hs, a Haskell utility that walks unbuilt Nix derivation graphs, reports cache availability, and can export filtered results. The tool is aimed at developers and CI operators who want to know which store paths will be free before a large build starts. It adds another option for pre-flight cache analysis in the Nix ecosystem.