: Netfilter -stable fixes
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest4 patches 0 repliesNew
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/4 | : Fix routing of REJECT target generated packets in output chainnet/ | +5 | 0 replies | |
| 2/4 | : nf_conntrack_ipv6: fix crash when handling fragmentsnet/ | +2 | 0 replies | |
| 3/4 | : tcp conntrack: fix IP_CT_TCP_FLAG_CLOSE_INIT valueinclude/ | +1 | 0 replies | |
| 4/4 | : arp_tables: fix userspace compilationinclude/ | +1 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [NETFILTER 00/04]: Netfilter -stable fixes
Following are a few important netfilter patches for -stable, fixing
- a crash in nf_conntrack_ipv6 when handling fragments
- an incorrect numerical value for the TCP connection tracking IP_CT_TCP_FLAG_CLOSE_INIT flag, causing various kinds of misbehaviour
- a regression in 2.6.19 when routing REJECT packets in the OUTPUT chain
- userspace compilation of arp_tables
All patches are either already in Linus' tree or queued in Dave's net-2.6 tree. Please apply, thanks.
include/linux/netfilter/nf_conntrack_tcp.h | 2 +- include/linux/netfilter_arp/arp_tables.h | 1 + net/ipv4/netfilter.c | 7 +++++-- net/ipv6/netfilter/nf_conntrack_reasm.c | 2 ++ 4 files changed, 9 insertions(+), 3 deletions(-)
Bart De Schuymer:
[NETFILTER]: arp_tables: fix userspace compilation
Patrick McHardy:
[NETFILTER]: Fix routing of REJECT target generated packets in output chain [NETFILTER]: nf_conntrack_ipv6: fix crash when handling fragments [NETFILTER]: tcp conntrack: fix IP_CT_TCP_FLAG_CLOSE_INIT value