freenode

← digests

Ubuntu previews, OpenWrt security fixes, Debian and Nix disputes

Distributions & Plumbing2026-11-09

Ubuntu advanced local speech recognition and Snapdragon hardware support while OpenWrt shipped a service release for high-severity web server flaws. Debian packaging and Nixpkgs CUDA maintenance both saw heated process disputes.

Ubuntu ships Myna speech-to-text preview

Ubuntu released Myna, a local on-device speech-to-text technology preview for GNOME and Wayland. Users reported problems with accents, languages, and models. Desktop users gain an offline dictation option that does not depend on cloud services.

Ubuntu Concept 26.10 adds Snapdragon enablement

Canonical published an experimental 26.10 Concept ISO that includes Snapdragon X2 enablement and kernel updates. A partnership aiming at an official 2027 image was announced. The work advances Ubuntu on Qualcomm ARM laptops and related devices.

Debian developer stops NEW uploads over LLM review

A Debian Developer refused further uploads to NEW after an unannounced deployment of LLM-based review. The long thread debated wasted resources and an earlier general resolution on AI use. Unannounced tooling changes affect contributor trust in the packaging pipeline.

OpenWrt 25.12.6 patches uhttpd vulnerabilities

OpenWrt issued the 25.12.6 service release to fix multiple high-severity remotely exploitable vulnerabilities in the default uhttpd. Operators of standard installations should update to close remote attack paths. The large discussion volume underlines the impact on typical router deployments.

Nixpkgs CUDA team splits over control and funding

The Nixpkgs CUDA team fractured after accusations of hijacking NVIDIA talks, domain, and infrastructure amid arguments over corporate funding and project scope. CUDA package maintenance in Nix now faces uncertainty. Users of GPU acceleration on NixOS may encounter slower or contested updates.

Curl cookie parser allows IP domain confusion

The curl cookie parser accepts a Domain attribute set to an IP from a host such as evil.127.0.0.1, permitting cookies for 127.0.0.1 (CWE-346). Applications that rely on curl cookie handling with IP addresses are exposed to origin confusion. Tighter suffix matching is required to close the gap.

Shunt adds DNS-agnostic policy routing on OpenWrt

The Shunt package was announced for policy-based routing on OpenWrt that remains independent of the DNS backend in use. The thread also produced a pull request to odhcp6c that corrects ignored DHCPv6 interface metrics. Administrators obtain more flexible routing without being locked to a particular DNS stack.

Gradient CI reaches stable 2.0 for NixOS

Gradient CI declared version 2.0 stable after 802 days of development, adding teams, remote workers over SSH, and NixOS integrations. The release supplies a faster continuous-integration path for NixOS projects. Maintainers can adopt team workflows and distributed builds more easily.