OpenWrt offload, LuCI XSS, Nix flakes

OpenWrt saw progress on hardware NAT offload, a new policy routing package, and a LuCI theme thread that exposed an XSS issue, while NixOS discussions covered flake input sourcing and Cargo builds. Fedora gained a Btrfs snapshot tool for dnf transactions.

IPQ5018 NSS offload on kernel 6.18

Working NSS offload for IPQ5018 NAT using the upstream stmmac ethernet stack is available on kernel 6.18, with public branches and reports on multiple boards including the GL-B3000. Participants in the OpenWrt forum thread tracked the integration. This advances accelerated networking for Qualcomm IPQ devices under the mainline ethernet path.

Footstrap LuCI theme exposes SVG XSS

Discussion of the Footstrap LuCI theme, described as twice as fast as bootstrap, revealed a stored unauthenticated SVG XSS via wallpaper upload served as image/svg+xml. The OpenWrt forum thread with dozens of participants surfaced the issue during theme evaluation. LuCI maintainers and users face an unauthenticated attack path in wallpaper handling that warrants attention.

Nix flake inputs via nixos.org tarballs

A NixOS discourse thread advocates switching flake inputs from GitHub to official channels.nixos.org tarballs. The change aims for smaller downloads and reduced forge dependency. Nix users gain more efficient and less external-dependent input resolution.

Shunt policy routing merges to OpenWrt

The shunt package for resolver-agnostic policy based routing merged into OpenWrt master after forum discussion. It operates without depending on any particular DNS backend. OpenWrt operators obtain flexible policy routing decoupled from resolver choice.

Cargo-dyndrv dynamic derivations for Nix

Cargo-dyndrv was announced as a dynamic-derivation approach to building Cargo projects in Nix that uses the unit graph. The short NixOS discourse thread introduced the tool. Packagers receive a new method for handling Rust crate builds inside Nix.

Luci-mod-dashboard UI rewrite

A contributor submitted a pull request for luci-mod-dashboard, an AI-redesigned LuCI dashboard with charts. Forum feedback centered on style consistency with existing components. The proposal seeks to modernize the OpenWrt web administration interface.

Bufferbloat mitigation script proposal

A user proposed an alternative OpenWrt bufferbloat script claiming lower CPU use when hardware offload is active, for fixed or dynamic bandwidth links. Debate with an sqm expert examined correctness and equivalence. The exchange underscores continued refinement of latency control under load.

Btrfs-patrol snapshots for Fedora dnf

Btrfs-patrol was released via COPR to take snapshots before every dnf transaction and support one-command rollback on Fedora's default Btrfs layout. The Fedora discussion covered testing and kernel handling. Users obtain automated pre-transaction safety on the standard filesystem setup.