Distributions: Ceph CVE fixes, OpenWrt releases, NixOS moves

Security updates and platform releases dominated distributions work, with Ceph authentication fixes landing in Ubuntu and OpenWrt shipping both a service release and expanded switch support. NixOS saw CI tooling stabilize and a government desktop adoption discussion, while Fedora debated process changes for future development.

Ubuntu Ceph updates address authentication bypass

Ubuntu announced upcoming Ceph package updates for Squid v19.2.6 and Tentacle v20.2.4 that fix CVE-2025-30156, an authentication bypass. Operators must rotate keys after upgrading and ensure kernel support is in place. The change matters for anyone running Ceph storage stacks who needs to close the bypass window cleanly.

OpenWrt gains RTL93xx managed switch support

A long-running OpenWrt thread on porting support for RTL838x and RTL93xx based managed switches concluded with a submitted pull request covering the UniFi USW Pro XG 10 PoE. Contributors coordinated hardware enablement across dozens of messages. The work expands OpenWrt reach onto additional enterprise-class switch silicon.

OpenWrt 25.12.6 service release ships

OpenWrt published the 25.12.6 service release, which includes uhttpd security fixes. Community reports logged roughly sixty successful upgrades alongside a handful of build issues. The release keeps the stable branch current for routers and embedded systems already on the 25.12 series.

Canonical previews Myna on-device speech-to-text

Canonical introduced Myna, a local on-device speech-to-text technology preview for Ubuntu Desktop under GNOME and Wayland. Testers shared feedback on accuracy, hardware requirements, and packaging. The preview lets desktop users evaluate offline dictation without sending audio off-device.

Gradient CI reaches stable v2.0 for NixOS

Gradient CI declared its v2.0 release stable after 802 days of development, adding teams support, remote workers over SSH, and tighter NixOS integrations. The project positions the release as a faster continuous-integration option for Nix-based builds. Maintainers and packagers gain another mature CI path with multi-machine execution.

Dutch government project adopts NixOS desktop

The Netherlands government DAWO project selected NixOS for a sovereign desktop environment, citing declarative reproducibility. Discussion on the NixOS discourse weighed sovereignty goals against purely technical motives. The choice signals public-sector interest in reproducible Linux desktops.

Fedora proposes confining Changes talk to devel list

A Fedora 46 change proposal would move Changes discussion exclusively to the devel mailing list, leaving Discourse as read-only announcements. The thread generated extensive debate on platform usability and participation. The outcome will shape how contributors review future distribution changes.

Nixpkgs tracks eMudhra intermediate CA mitigation

A Nixpkgs tracking issue recorded that mitigation for the eMudhra intermediate CA compromise (CVE-2026-111943) has landed in the unstable and 26.05 channels. The update addresses trust-store exposure from the compromised intermediate. NixOS users on those channels receive the fix through ordinary channel updates.