lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-Id: <20230503063250.13700-1-pablo@netfilter.org> Date: Wed, 3 May 2023 08:32:47 +0200 From: Pablo Neira Ayuso <pablo@...filter.org> To: netfilter-devel@...r.kernel.org Cc: davem@...emloft.net, netdev@...r.kernel.org, kuba@...nel.org, pabeni@...hat.com, edumazet@...gle.com Subject: [PATCH net 0/3] Netfilter fixes for net Hi, The following patchset contains Netfilter fixes for net: 1) Hit ENOENT when trying to update an unexisting base chain. 2) Fix libmnl pkg-config usage in selftests, from Jeremy Sowden. 3) KASAN reports use-after-free when deleting a set element for an anonymous set that was already removed in the same transaction, reported by P. Sondej and P. Krysiuk. Please, pull these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git Thanks. ---------------------------------------------------------------- The following changes since commit c6d96df9fa2c1d19525239d4262889cce594ce6c: net: ethernet: mtk_eth_soc: drop generic vlan rx offload, only use DSA untagging (2023-05-02 20:19:52 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git nf-23-05-03 for you to fetch changes up to c1592a89942e9678f7d9c8030efa777c0d57edab: netfilter: nf_tables: deactivate anonymous set from preparation phase (2023-05-03 08:24:32 +0200) ---------------------------------------------------------------- netfilter pull request 23-05-03 ---------------------------------------------------------------- Jeremy Sowden (1): selftests: netfilter: fix libmnl pkg-config usage Pablo Neira Ayuso (2): netfilter: nf_tables: hit ENOENT on unexisting chain/flowtable update with missing attributes netfilter: nf_tables: deactivate anonymous set from preparation phase include/net/netfilter/nf_tables.h | 1 + net/netfilter/nf_tables_api.c | 41 +++++++++++++++++++++--------- net/netfilter/nft_dynset.c | 2 +- net/netfilter/nft_lookup.c | 2 +- net/netfilter/nft_objref.c | 2 +- tools/testing/selftests/netfilter/Makefile | 7 +++-- 6 files changed, 38 insertions(+), 17 deletions(-)
Powered by blists - more mailing lists