Hi,
Krzysztof Oledzki discovered a serious bug in the 2.4.x versions of ipset:
when flushing a nethash/ipportnethash type of set, it can lead to a kernel
crash due to a wrong type declaration in the flush functions. Also, for a
successful compilation with kernel versions above 2.6.26.6, an include
file was missing from ip_set_iptree.c and ip_set_iptreemap.c.
Please upgrade to ipset 2.4.2.
You can download the source of ipset from the webpage or svn:
http://ipset.netfilter.org/
svn co https://svn.netfilter.org/netfilter/trunk/ipset
Best regards,
Jozsef
-
E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
