From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Date: Wed, 14 Aug 2019 11:24:33 +0200 > This patchset contains Netfilter fixes for net: > > 1) Extend selftest to cover flowtable with ipsec, from Florian Westphal. > > 2) Fix interaction of ipsec with flowtable, also from Florian. > > 3) User-after-free with bound set to rule that fails to load. > > 4) Adjust state and timeout for flows that expire. > > 5) Timeout update race with flows in teardown state. > > 6) Ensure conntrack id hash calculation use invariants as input, > from Dirk Morris. > > 7) Do not push flows into flowtable for TCP fin/rst packets. > > You can pull these changes from: > > git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Pulled, thanks.
