Hi Dave, these two patches fix an off-by-one if the TCP window tracking ACK sequence validation, leading to incorrectly marked INVALID packets, and another off-by-one in the Boyer-Moore text search algorithm. Both are also candidates for -stable which I'll pass on once they hit upstream. Please apply, thanks. lib/ts_bm.c | 2 +- net/netfilter/nf_conntrack_proto_tcp.c | 13 +++++++------ 2 files changed, 8 insertions(+), 7 deletions(-) Joonwoo Park (1): textsearch: fix Boyer-Moore text search bug Jozsef Kadlecsik (1): netfilter: nf_conntrack_tcp: fixing to check the lower bound of valid ACK -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html