netdev - [GIT PULL nf 0/3] IPVS Fixes for v4.5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1455756061-21834-1-git-send-email-horms@verge.net.au>
Date:	Thu, 18 Feb 2016 09:40:58 +0900
From:	Simon Horman <horms@...ge.net.au>
To:	Pablo Neira Ayuso <pablo@...filter.org>
Cc:	lvs-devel@...r.kernel.org, netdev@...r.kernel.org,
	netfilter-devel@...r.kernel.org,
	Wensong Zhang <wensong@...ux-vs.org>,
	Julian Anastasov <ja@....bg>, Simon Horman <horms@...ge.net.au>
Subject: [GIT PULL nf 0/3] IPVS Fixes for v4.5

Hi Pablo,

please consider these IPVS fixes for v4.5.

* Arnd Bergman has corrected an error whereby the SIP persistence engine
  may incorrectly access protocol fields
* Julian Anastasov has corrected a problem reported by Jiri Bohac with the
  connection rescheduling mechanism added in 3.10 when new SYNs in
  connection to dead real server can be redirected to another real server.

The following changes since commit 5cc6ce9ff27565949a1001a2889a8dd9fd09e772:

  netfilter: nft_counter: fix erroneous return values (2016-02-08 13:05:02 +0100)

are available in the git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs.git tags/ipvs-fixes-for-v4.5

for you to fetch changes up to 5acaf89f88b97849d550d6fbb10362e3d84b5082:

  netfilter: ipvs: handle ip_vs_fill_iph_skb_off failure (2016-02-18 09:31:48 +0900)

----------------------------------------------------------------
Arnd Bergmann (1):
      netfilter: ipvs: handle ip_vs_fill_iph_skb_off failure

Julian Anastasov (2):
      netfilter: ipvs: drop first packet to redirect conntrack
      netfilter: ipvs: allow rescheduling after RST

 include/net/ip_vs.h               | 17 +++++++++++++++++
 net/netfilter/ipvs/ip_vs_core.c   | 38 +++++++++++++++++++++++++++++---------
 net/netfilter/ipvs/ip_vs_pe_sip.c |  4 ++--
 3 files changed, 48 insertions(+), 11 deletions(-)