On Tue, Jun 07, 2011 at 11:39:33AM +0900, Fernando Luis Vázquez Cao wrote: > On Mon, 2011-06-06 at 10:36 -0700, Greg KH wrote: > > On Mon, Jun 06, 2011 at 02:41:10AM +0200, pablo@xxxxxxxxxxxxx wrote: > > > From: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx> > > > > > > The IPv6 header is not zeroed out in alloc_skb so we must initialize > > > it properly unless we want to see IPv6 packets with random TOS fields > > > floating around. The current implementation resets the flow label > > > but this could be changed if deemed necessary. > > > > > > We stumbled upon this issue when trying to apply a mangle rule to > > > the RST packet generated by the REJECT target module. > > > > > > The following Linux kernels are affected: <= 2.6.38.8 > > > > > > Cc: stable@xxxxxxxxxx > > > Signed-off-by: Fernando Luis Vazquez Cao <fernando@xxxxxxxxxxxxx> > > > Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> > > > (cherry picked from commit 4319cc0cf5bb894b7368008cdf6dd20eb8868018) > > > > So, what kernel(s) are you wanting this to be applied to? > > Both patches fix bugs that have present from day one, so, ideally, I > would like to have them applied to all the stable and longterm kernels: > > linux-2.6.38.8 > linux-2.6.37.6 > linux-2.6.36.4 > linux-2.6.35.13 > linux-2.6.34.9 > linux-2.6.33.14 > linux-2.6.32.41 > linux-2.6.27.59 > > > Should I just take the upstream > > 4319cc0cf5bb894b7368008cdf6dd20eb8868018, or does your backport do > > something different here? > > [PATCH 1/2] netfilter: IPv6: initialize TOS field in REJECT target module > For linux-2.6.38.8 you can take the upstream > 4319cc0cf5bb894b7368008cdf6dd20eb8868018. For linux-2.6.37.6, > linux-2.6.36.4, linux-2.6.35.13, linux-2.6.34.9, linux-2.6.33.14, > linux-2.6.32.41, and linux-2.6.27.59 you will need to use the attached > backport. Ok, but this doesn't apply at all to the 2.6.39-stable kernel. And .38-stable is end-of-life, as is .36-stable and .37-stable. So, care to start all over again? I need patches that apply to the .39-stable tree. And then to any other stable kernel that you wish to have them apply to. Currently "live" kernels are .32-longterm, .33-longterm, .34-longterm, and .35-longterm. thanks, greg k-h -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
