[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <20160120.185736.1574382642233693132.davem@davemloft.net>
Date: Wed, 20 Jan 2016 18:57:36 -0800 (PST)
From: David Miller <davem@...emloft.net>
To: pablo@...filter.org
Cc: netfilter-devel@...r.kernel.org, netdev@...r.kernel.org
Subject: Re: [PATCH 0/6] Netfilter fixes for net
From: Pablo Neira Ayuso <pablo@...filter.org>
Date: Wed, 20 Jan 2016 18:03:58 +0100
> The following patchset contains Netfilter fixes for your net tree, they
> are:
>
> 1) Fix accidental 3-times le/be conversion for 64-bits in nft_byteorder,
> from Florian Westphal.
>
> 2) Get rid of defensive cidr = 0 check in the ipset hash:netiface set
> type which doesn't allow valid 0.0.0.0/0 elements, also from Florian.
>
> 3) Relocate #endif in nft_ct counter support, this doesn't have any
> relation with labels.
>
> 4) Fix TCPMSS target for IPv6 when skb has CHECKSUM_COMPLETE, from
> Eric Dumazet.
>
> 5) Fix netdevice notifier leak from the error path of nf_tables_netdev.
>
> 6) Safe conntrack hashtable resizing by introducing a global lock and
> synchronize all buckets to avoid going over the maximum number of
> preemption levels, from Sasha Levin.
>
> You can pull these changes from:
>
> git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Pulled, thanks Pablo.
Powered by blists - more mailing lists