Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> writes: > On Thu, Jul 04, 2013 at 03:59:54PM +0100, Luis Henriques wrote: >> Hi Pablo, >> >> Apparently, most of these patches are also applicable to older kernel >> trees. I did a quick check and the following seem to be applicable to >> the 3.5 kernel: >> >> bc6bcb5 netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary >> 4f36ea6 netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path >> 2a7851b netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6 >> d660164 netfilter: xt_LOG: fix mark logging for IPv6 packets >> a8241c6 ipvs: info leak in __ip_vs_get_dest_entries() >> 37bc4f8 netfilter: nfnetlink_cttimeout: fix incomplete dumping of objects >> 991a6b7 netfilter: nfnetlink_acct: fix incomplete dumping of objects >> 409b545 netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option >> ed82c43 netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr() >> b396966 netfilter: xt_TCPMSS: Fix missing fragmentation handling >> 70d19f8 netfilter: xt_TCPMSS: Fix IPv6 default MSS too >> 06f3d7f ipvs: SCTP ports should be writable in ICMP packets >> >> Only these 3 were left out: >> >> dc7b3eb ipvs: Fix reuse connection if real server is dead >> 5aed938 netfilter: nf_nat_sip: fix mangling >> 797a7d6 netfilter: ctnetlink: send event when conntrack label was modified >> >> Do you have any reason for including them on 3.9 kernel only, or >> should they be queued for older kernels as well? > > Those can be queued for old kernels as well. Great, thanks for clarifying. I'll queue the above list for the 3.5 kernel. Cheers, -- Luis -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
