On Thu, Jul 04, 2013 at 03:59:54PM +0100, Luis Henriques wrote: > Hi Pablo, > > Apparently, most of these patches are also applicable to older kernel > trees. I did a quick check and the following seem to be applicable to > the 3.5 kernel: > > bc6bcb5 netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary > 4f36ea6 netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path > 2a7851b netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6 > d660164 netfilter: xt_LOG: fix mark logging for IPv6 packets > a8241c6 ipvs: info leak in __ip_vs_get_dest_entries() > 37bc4f8 netfilter: nfnetlink_cttimeout: fix incomplete dumping of objects > 991a6b7 netfilter: nfnetlink_acct: fix incomplete dumping of objects > 409b545 netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option > ed82c43 netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr() > b396966 netfilter: xt_TCPMSS: Fix missing fragmentation handling > 70d19f8 netfilter: xt_TCPMSS: Fix IPv6 default MSS too > 06f3d7f ipvs: SCTP ports should be writable in ICMP packets > > Only these 3 were left out: > > dc7b3eb ipvs: Fix reuse connection if real server is dead > 5aed938 netfilter: nf_nat_sip: fix mangling > 797a7d6 netfilter: ctnetlink: send event when conntrack label was modified > > Do you have any reason for including them on 3.9 kernel only, or > should they be queued for older kernels as well? Those can be queued for old kernels as well. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
