Hi, Would any of the following mainline commits be appropriate for cherry-picking into the 3.8 stable tree? c2d421e netfilter: nf_nat: fix race when unloading protocol modules 6eb4c7e netfilter: ipset: hash:*net*: nomatch flag not excluded on set resize 02f815c netfilter: ipset: list:set: fix reference counter update 3a7b21e netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet 906b1c3 netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths bae99f7 netfilter: nfnetlink_queue: fix incorrect initialization of copy range field dd82088 netfilter: ipset: "Directory not empty" error message cf1c4a0 netfilter: ipset: timeout values corrupted on set resize 442fad9 netfilter: ctnetlink: don't permit ct creation with random tuple d9e8565 netfilter ip6table_mangle: Use ipv6_addr_equal() where appropriate. 29e3b16 netfilter ipset: Use ipv6_addr_equal() where appropriate. Additionally there are these two related commits: 124dff0 netfilter: don't reset nf_trace in nf_reset() 130549f netfilter: reset nf_trace in nf_reset Kind Regards, Oliver -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
