netdev - netfilter 01/02: nf_nat: fix NAT issue in 2.6.30.4+

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4AF31832.1070701@trash.net>
Date:	Thu, 05 Nov 2009 19:23:46 +0100
From:	Patrick McHardy <kaber@...sh.net>
To:	"David S. Miller" <davem@...emloft.net>
CC:	Netfilter Development Mailinglist 
	<netfilter-devel@...r.kernel.org>,
	Linux Netdev List <netdev@...r.kernel.org>
Subject: netfilter 01/02: nf_nat: fix NAT issue in 2.6.30.4+

Hi Dave,

the following two patches fix two netfilter bugs:

- incorrect sequence number tracking in TCP conntrack in combination
  with NAT helpers that enlarge the packet, causing incorrectly
  detected out of window packets

- a regression in the connlimit match

The first patch is quite large for this late in the release cycle, so
if you prefer, I'll queue it up for net-next instead.

I'll pass on both to -stable once they hit upstream.

Please apply, thanks!

View attachment "01.diff" of type "text/x-patch" (10270 bytes)