[ANNOUNCE] ipset 7.20 released

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

I'm happy to announce ipset 7.20: besides two json output corrections, it 
contains an important race condition fix between swap/destroy and kernel 
side add/del/test operation. In order to find the best solution to fix the 
issue without slowing down any operations and keeping the internal rules 
where execution may wait for concurrent operations to complete, there were 
several iterations of the patch.

Userspace changes:
  - Ignore *.order.cmd and *.symvers.cmd files in kernel builds
  - Bash completion utility updated
  - Fix json output for -name option (Mark)
  - Fix hex literals in json output
  - tests: increase timeout to cope with slow virtual test machine

Kernel part changes:
  - treewide: Convert del_timer*() to timer_shutdown*() (Steven Rostedt)
  - Use timer_shutdown_sync() when available, instead of del_timer_sync()
  - netfilter: ipset: fix race condition between swap/destroy and kernel
    side add/del/test v4
  - netfilter: ipset: fix race condition between swap/destroy and kernel
    side add/del/test v3
  - netfilter: ipset: fix race condition between swap/destroy and kernel
    side add/del/test v2
  - netfilter: ipset: fix race condition between swap/destroy and kernel
    side add/del/test

You can download the source code of ipset from:
        https://ipset.netfilter.org
        git://git.netfilter.org/ipset.git

Best regards,
Jozsef
-- 
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxx
PGP key : https://wigner.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics
          H-1525 Budapest 114, POB. 49, Hungary




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux