Distributions and Plumbing: 2026-11-06

OpenWrt issued a service release fixing high-severity remote vulnerabilities while a long-standing musl crypt flaw affecting SSH drew fresh attention. Fedora marked a secrets provider failure as a release blocker for version 45 and saw heated debate over X11 removal, as Ubuntu published an experimental Snapdragon Concept image.

OpenWrt 25.12.6 Service Release

OpenWrt published the 25.12.6 service release. It addresses multiple high-severity remotely exploitable vulnerabilities in the default uhttpd web server. Operators should apply the update promptly to close the exposed attack surface.

Fedora 45 Secrets Provider Blocker

Fresh Fedora 45 installs lack a working secrets provider because oo7 fails to create keyrings. The defect has been accepted as a release blocker. New installation workflows remain broken until a fix lands.

Musl crypt Flaw and OpenSSH on OpenWrt

Discussion covered public disclosure of a musl crypt() flaw that permits passwordless OpenSSH logins on affected OpenWrt systems. The weakness has existed since 2016. Administrators running musl-based OpenWrt images need to assess SSH exposure.

Ubuntu 26.10 Concept Snapdragon Edition

Canonical released an experimental Ubuntu 26.10 Concept ISO that adds Snapdragon X2 enablement and kernel updates. A partnership aiming at an official image in 2027 was also announced. The work advances early ARM laptop support within Ubuntu.

Fedora KDE Removes X11 Sessions

Fedora KDE users reported the complete disappearance of the X11 session option after an update. The change prompted debate over the Wayland transition, session restore behavior, and security justifications. Users who still rely on X11 must seek workarounds.

OpenWrt Support for IPQ9574 Spectrum Device

Porting work on the Spectrum SBE1V1K (IPQ9574) reported functional regulators, Wi-Fi MLO, and a TFTP boot method. A pull request fixing kernel load address alignment has been submitted. The effort broadens OpenWrt coverage for this hardware platform.

Fedora Self-Updating Kernel Hardening Profiles

Fedora announced optional self-updating kernel hardening profiles beginning with Fedora 45. The profiles are intended for general desktop use alongside SELinux and firewalld. Both beginners and advanced users receive an additional hardening layer that maintains itself.

Shunt Policy Routing Package for OpenWrt

The new OpenWrt package shunt supplies resolver-agnostic domain policy routing through DNS snooping. Recent updates added tproxy support, file lists, and TTL handling. It lets administrators apply routing rules without depending on a particular DNS backend.