On Fri, 6 Aug 2021 17:11:40 +0200 Pablo Neira Ayuso wrote: > 1) Restrict range element expansion in ipset to avoid soft lockup, > from Jozsef Kadlecsik. > > 2) Memleak in error path for nf_conntrack_bridge for IPv4 packets, > from Yajun Deng. > > 3) Simplify conntrack garbage collection strategy to avoid frequent > wake-ups, from Florian Westphal. > > 4) Fix NFNLA_HOOK_FUNCTION_NAME string, do not include module name. > > 5) Missing chain family netlink attribute in chain description > in nfnetlink_hook. > > 6) Incorrect sequence number on nfnetlink_hook dumps. > > 7) Use netlink request family in reply message for consistency. > > 8) Remove offload_pickup sysctl, use conntrack for established state > instead, from Florian Westphal. > > 9) Translate NFPROTO_INET/ingress to NFPROTO_NETDEV/ingress, since > NFPROTO_INET is not exposed through nfnetlink_hook. Looks like the bot doesn't want to respond :S Pulled in the morning already, thanks!
