Hi David,
The following patchset contains updates for your net tree, they are:
1) Fix removal of destination in IPVS when the new mixed family support
is used, from Alexey Andriyanov via Simon Horman.
2) Fix module refcount undeflow in nft_compat when reusing a match /
target.
3) Fix iptables-restore when the recent match is used with a new hitcount
that exceeds threshold, from Florian Westphal.
4) Fix stack corruption in xt_socket due to using stack storage to save
the inner IPv6 header, from Eric Dumazet.
I'll follow up soon with another batch with more fixes that are still
cooking.
You can pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Thanks!
----------------------------------------------------------------
The following changes since commit 42b5212fee4f57907e9415b18fe19c13e65574bc:
xen-netback: stop the guest rx thread after a fatal error (2015-02-02 19:39:04 -0800)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git master
for you to fetch changes up to 78296c97ca1fd3b104f12e1f1fbc06c46635990b:
netfilter: xt_socket: fix a stack corruption bug (2015-02-16 17:00:48 +0100)
----------------------------------------------------------------
Alexey Andriyanov (1):
ipvs: fix inability to remove a mixed-family RS
Eric Dumazet (1):
netfilter: xt_socket: fix a stack corruption bug
Florian Westphal (1):
netfilter: xt_recent: don't reject rule if new hitcount exceeds table max
Pablo Neira Ayuso (1):
netfilter: nft_compat: fix module refcount underflow
net/netfilter/ipvs/ip_vs_ctl.c | 2 +-
net/netfilter/nft_compat.c | 12 ++++++++++--
net/netfilter/xt_recent.c | 11 +++++------
net/netfilter/xt_socket.c | 21 ++++++++++++---------
4 files changed, 28 insertions(+), 18 deletions(-)
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
