From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Hi! The following patchset aims to reduce the Netfilter debt with stable 3.0 and onwards. The selected six patches are: 07153c6 netfilter: nf_ct_ipv4: packets with wrong ihl are invalid 3f509c6 netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP expectation f22eb25 netfilter: nf_nat_sip: fix via header translation with multiple parameters 2614f86 netfilter: nf_ct_expect: fix possible access to uninitialized timer 9e33ce4 ipvs: fix oops on NAT reply in br_nf context 82e6bfe netfilter: xt_limit: have r->cost != 0 case work [REQUIRES 7a909ac netfilter: limit, hashlimit: avoid duplicated inline] I have read stable_rules.txt and I consider they match the requirements. Please, cherry-pick them. Thanks! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html