Sandbox escapes, Nix stores, and switch support

Security trackers for xdg-dbus-proxy and libsoup led the day's distribution news, while Nix and OpenWrt communities advanced new storage layers, historical package access, and hardware ports. Canonical also floated early Snapdragon images ahead of a longer Qualcomm partnership.

xdg-dbus-proxy reply serial sandbox escape

CVE-2026-94422 was filed against xdg-dbus-proxy for a high-severity sandbox escape that bypasses message filtering via reply serial handling. The issue is tracked in the Nixpkgs security discussion. Environments that rely on the proxy for D-Bus isolation need to treat the report as urgent.

Casita content-addressed store for Nix

Domenkozar announced Casita, an Apache 2 licensed content-addressed store layer aimed at a Nix rewrite and covering source code plus build artifacts. The proposal includes design comparisons to Snix. Developers evaluating Nix storage backends have a concrete new architecture to review.

OpenWrt RTL838x and RTL93xx switch support

A lengthy OpenWrt forum thread on RTL93xx managed-switch porting closed with a submitted pull request for the UniFi USW Pro XG 10 PoE. The work also covers RTL838x hardware common in prosumer and enterprise gear. Contributors extending OpenWrt switch support now have an upstream path for these SoCs.

Ubuntu Concept 26.10 Snapdragon Edition

Canonical published an experimental 26.10 Beta ISO for Snapdragon X2 hardware and signaled a 2027 official partnership with Qualcomm. The Concept images give early access to ARM laptop platforms under Ubuntu. Packagers and testers following non-x86 Ubuntu have both a test image and a longer-term roadmap cue.

Nixpkgs-multiverse historical revisions

The nixpkgs-multiverse service was announced, exposing every historical Nixpkgs revision through a composable Nix API. The release removes the need for manual git archaeology when pinning or querying past package sets. Reproducibility and bisect workflows gain centralized access to the full revision history.

Wwand mobile connection manager with eSIM

A new ucode QMI daemon named wwand was introduced on the OpenWrt forum with eSIM support. Compatibility work for modems and offload paths is ongoing. Builders of OpenWrt-based mobile routers have another option for cellular link management.

Hydra crawler response change

NixOS Hydra currently returns Markov-generated text to crawlers, and a pull request proposes answering with HTTP 403 instead. The change would make bot handling on the continuous-integration front end explicit. Operators watching crawl load or signal quality may want to follow the discussion.

libsoup data-uri base64 heap overflow

Nixpkgs opened a tracker entry for CVE-2026-102555, an 8.2 CVSS heap buffer overflow in libsoup caused by an uninitialized length during data-uri base64 decoding. Applications that use libsoup for URI handling are in scope. Distributions shipping the library should watch for incoming patches.