Undertow
Undertow 2.4.0 clears three CVEs and finally lands long-open HTTP/2 and timeout requests
A side-by-side editorial comparison of Betaflight and Libreswan — release velocity, themes, recent moves, and the top alternatives to consider.
Betaflight grew a real autopilot: waypoint missions, geofence RTH and MAVLink ground control
Betaflight runs two lines at once. The 2025.12.x branch is pure maintenance — UART interrupt handling, MSP race conditions, failsafe clamping, and periodic board-target refreshes — while the 2026.6 line, which reached 2026.6.1 in August, carries the largest feature set in this window by a wide margin. That feature set is dominated by one thread: an AUTOPILOT mode with flight-plan configuration, CLI waypoint commands, in-flight waypoint capture on a switch, geofence return-to-home, LAND loiter and TAKEOFF patterns, plus OSD waypoint elements and a navigation minimap. Alongside it sits a DroneCAN protocol stack with ESC and GNSS providers, CAN peripheral support on three MCU families, MAVLink mission upload and download, and STM32N6 platform bring-up.
IPsec daemon shipping back-to-back CVE releases, one of them found by an AI audit.
Libreswan is an IKE/IPsec implementation, and its recent visible releases are entirely security-driven: 5.3.1 addressed three CVEs, and 5.3.2 followed a month later with a single one. The 5.3.2 note discloses that the project ran an AI-assisted audit of its own codebase, which surfaced an assertion failure reachable through a malformed X.509 certificate in FIPS mode. The older entries in this feed are raw commit-log dumps from the 4.x and 5.0rc era rather than curated notes.
Betaflight runs two lines at once. The 2025.12.x branch is pure maintenance — UART interrupt handling, MSP race conditions, failsafe clamping, and periodic board-target refreshes — while the 2026.6 line, which reached 2026.6.1 in August, carries the largest feature set in this window by a wide margin. That feature set is dominated by one thread: an AUTOPILOT mode with flight-plan configuration, CLI waypoint commands, in-flight waypoint capture on a switch, geofence return-to-home, LAND loiter and TAKEOFF patterns, plus OSD waypoint elements and a navigation minimap. Alongside it sits a DroneCAN protocol stack with ESC and GNSS providers, CAN peripheral support on three MCU families, MAVLink mission upload and download, and STM32N6 platform bring-up.
The autopilot work is not a single feature but a rebuild of how the firmware handles position: the release notes show position control unified on a velocity primitive and the existing GPS rescue reimplemented as a flight-plan mission rather than a special case. That direction pulls hardware integration along with it — DroneCAN node allocation, GNSS Fix2, ESC telemetry and MAVLink ground-station handshaking are all things a manually flown craft does not need. The SITL harness gained fidelity and per-run session ids in the same releases, which is what you build when autonomous behaviour has to be regression-tested rather than test-flown.
With GPS rescue now running through the mission engine, the next releases on this line should concentrate on hardening that path — the release candidates already added an rx-loss policy, sanity checks and an arming gate for flight plans, and safety scaffolding of that kind usually keeps accumulating after the feature ships.
Libreswan is an IKE/IPsec implementation, and its recent visible releases are entirely security-driven: 5.3.1 addressed three CVEs, and 5.3.2 followed a month later with a single one. The 5.3.2 note discloses that the project ran an AI-assisted audit of its own codebase, which surfaced an assertion failure reachable through a malformed X.509 certificate in FIPS mode. The older entries in this feed are raw commit-log dumps from the 4.x and 5.0rc era rather than curated notes.
The project is auditing itself more aggressively than its release cadence suggests, and the parsing paths — certificate handling, IKEv1 proposal defaults — are where the findings keep landing. The 5.0 work visible here was a deliberate tightening of IKEv1 cryptosuite defaults, and the current CVE stream is the same instinct applied to inputs an attacker controls.
Further findings from the same audit path would surface as additional point releases against certificate and packet parsing; the entries do not indicate whether the audit is complete.
Other DevOps products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Betaflight or Libreswan.
Undertow 2.4.0 clears three CVEs and finally lands long-open HTTP/2 and timeout requests
OceanBase is rebuilding itself as a RAG backend without giving up the HTAP story
QGroundControl rebuilt its flight UI around touch screens, then went quiet for ten months
Pelican now ships roughly once a year, and 4.12 is theme housekeeping
WildFly's quarterly train is really a stability ladder, and OIDC keeps climbing it
Jakarta REST implementation in pure maintenance across two parallel branches.
See all Betaflight alternatives → · See all Libreswan alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Betaflight is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Betaflight is currently shipping more aggressively (velocity 6.3 vs 2.5), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other DevOps products to evaluate alongside.
Top Betaflight alternatives in DevOps are ranked by recent ship velocity. Browse the "Betaflight alternatives" section above for the current picks, or visit /alternatives/betaflight for the full list with editorial commentary on each.
Top Libreswan alternatives in DevOps are ranked by recent ship velocity. Browse the "Libreswan alternatives" section above for the current picks, or visit /alternatives/libreswan for the full list with editorial commentary on each.