Snapd CVEs and Fedora packaging shifts

Security fixes for snapd and several Fedora change proposals led the distributions section, with secondary threads on NixOS tooling and Ubuntu desktop packaging. Packagers weighed OpenPGP verification, 32-bit build cuts, secrets handling, and long-term support costs.

Snapd vulnerabilities fixed across Ubuntu LTS

Canonical posted fixes for three snapd CVEs, two rated high severity, that affect multiple Ubuntu LTS releases. The updates close issues in the snap daemon widely used for application packaging on Ubuntu. Operators of snap-based systems have a clear reason to apply the patches.

Fedora weighs Sequoia openpgpverify macro

Fedora developers debated an F45 change proposal to replace the gpgverify macro with a self-contained Sequoia-based openpgpverify implementation. Threads on the devel list and Discourse examined migration steps, expired-key behavior, LibrePGP fork history, and macro naming. The shift would alter how packagers verify signatures in package builds.

Bulk i686 exclusions proposed for Fedora leaf packages

Fedora packagers discussed applying ExcludeArch:i686 in bulk to roughly 3400 leaf packages as an easy way to cut build load. Some participants pushed back on the remaining value of continued 32-bit builds. The change could free infrastructure capacity if the easy-win set is accepted.

NixOS secrets discussion turns to moderation

A NixOS Discourse thread arguing that secrets do not belong in configuration modules derailed into accusations of undisclosed LLM use and calls for moderation. The original topic concerned proper handling of secrets inside modules. The exchange highlights friction over both technical practice and community norms.

Debugger access sought for failed Nix builds

Two users on NixOS Discourse explored making nix build --debugger available through nix-build so failed builds can drop into interactive shells, and an issue was filed. The proposal targets a practical gap in debugging workflows. Broader debugger availability would simplify diagnosis for package maintainers.

Ubuntu GNOME extensions proposal draws pushback

A proposal to ship popular GNOME extensions as base options in Ubuntu settings met resistance over packaging complexity, 15-year support obligations, and replaceability. Discussants on Ubuntu Discourse stressed the long-term maintenance burden. The idea remains open without consensus.