netdev - Backporting "netfilter: xt_hashlimit: Fix integer divide round to zero." to stable kernels

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20180112001138.zqajpmuaebmqm2vb@debamax.com>
Date:   Fri, 12 Jan 2018 01:11:38 +0100
From:   Cyril Brulebois <cyril@...amax.com>
To:     netdev@...r.kernel.org
Cc:     872907@...s.debian.org, 884983@...s.debian.org
Subject: Backporting "netfilter: xt_hashlimit: Fix integer divide round to
 zero." to stable kernels

Hi,

A customer of mine has been hitting hashlimits issues in netfilter by
switching from Debian 8 (3.16.y) to Debian 9 (4.9.y), making iptables
hashlimits unusable for production.

This issue has been fixed in mainline with this commit:
| commit ad5b55761956427f61ed9c96961bf9c5cd4f92dc
| Author: Alban Browaeys <alban.browaeys@...il.com>
| Date:   Mon Feb 6 23:50:33 2017 +0100
| 
|     netfilter: xt_hashlimit: Fix integer divide round to zero.

Backporting this commit to Debian 9's 4.9.y kernel series has been
confirmed to fix the bug there. It might be worth considering it for
other stable kernels though.

Downstream bug reports:
  https://bugs.debian.org/872907
  https://bugs.debian.org/884983

Thanks for considering.

Cheers,
-- 
Cyril Brulebois -- Debian Consultant @ DEBAMAX -- https://debamax.com/

Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)