On Mon, May 22, 2023 at 01:55:44PM -0400, Sasha Levin wrote:
> On Tue, May 16, 2023 at 05:15:58PM +0200, Pablo Neira Ayuso wrote:
> > Hi Greg, Sasha,
> >
> > This is second round of -stable backport fixes for 4.14. This batch
> > includes dependency patches which are not currently in the 4.14 branch.
> >
> > The following list shows the backported patches, I am using original
> > commit IDs for reference:
> >
> > 1) 08a01c11a5bb ("netfilter: nftables: statify nft_parse_register()")
> >
> > 2) 6e1acfa387b9 ("netfilter: nf_tables: validate registers coming from userspace.")
> >
> > 3) 20a1452c3542 ("netfilter: nf_tables: add nft_setelem_parse_key()")
> >
> > 4) fdb9c405e35b ("netfilter: nf_tables: allow up to 64 bytes in the set element data area")
> >
> > 5) 7e6bc1f6cabc ("netfilter: nf_tables: stricter validation of element data")
> >
> > 6) 215a31f19ded ("netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL")
> >
> > 7) 36d5b2913219 ("netfilter: nf_tables: do not allow RULE_ID to refer to another chain")
> >
> > 8) 470ee20e069a ("netfilter: nf_tables: do not allow SET_ID to refer to another table")
>
> I've applied the 5.4 and 4.19 series, but it looks like patch #1 here
> fails to apply. Could you please re-send the 4.14 series?
Sure, I'll rebase and resend v2. Thanks.
