From: Patrick McHardy <kaber@trash.net>
To: stable@kernel.org
Cc: netfilter-devel@lists.netfilter.org,
Patrick McHardy <kaber@trash.net>,
davem@davemloft.net
Subject: [NETFILTER 00/08]: Netfilter -stable fixes
Date: Fri, 17 Nov 2006 06:35:40 +0100 (MET) [thread overview]
Message-ID: <20061117053540.10231.92379.sendpatchset@localhost.localdomain> (raw)
Following are backports of a few important netfilter fixes for -stable,
fixing multiple bugs in the ip_tables compat layer, missing checks
during ip_tables ruleset validation and a crash on arp_tables module
unload/reload. Also included are two patches fixing incorrect Kconfig
dependencies and a LVS NAT source routing fix.
Please apply, thanks.
include/linux/netfilter_ipv4.h | 2
net/ipv4/ipvs/ip_vs_core.c | 10 ++++
net/ipv4/netfilter.c | 9 ++--
net/ipv4/netfilter/arp_tables.c | 27 ++++++++----
net/ipv4/netfilter/ip_nat_standalone.c | 3 -
net/ipv4/netfilter/ip_tables.c | 70 +++++++++++++++++++++------------
net/ipv4/netfilter/iptable_mangle.c | 3 -
net/ipv6/netfilter/ip6_tables.c | 24 +++++++----
net/netfilter/Kconfig | 6 +-
9 files changed, 104 insertions(+), 50 deletions(-)
Patrick McHardy:
[NETFILTER]: ip_tables: missing check for CAP_NET_ADMIN in compat layer
[NETFILTER]: ip_tables: compat error way cleanup
[NETFILTER]: ip_tables: fix module refcount leaks in compat error paths
[NETFILTER]: Missed and reordered checks in {arp,ip,ip6}_tables
[NETFILTER]: arp_tables: missing unregistration on module unload
[NETFILTER]: Honour source routing for LVS-NAT
[NETFILTER]: Kconfig: fix xt_physdev dependencies
[NETFILTER]: xt_CONNSECMARK: fix Kconfig dependencies
next reply other threads:[~2006-11-17 5:35 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-11-17 5:35 Patrick McHardy [this message]
2006-11-17 5:35 ` [NETFILTER 01/08]: Missing check for CAP_NET_ADMIN in iptables compat layer Patrick McHardy
2006-11-17 5:35 ` [NETFILTER 02/08]: ip_tables: compat error way cleanup Patrick McHardy
2006-11-17 5:35 ` [NETFILTER 03/08]: ip_tables: fix module refcount leaks in compat error paths Patrick McHardy
2006-11-17 5:35 ` [NETFILTER 04/08]: Missed and reordered checks in {arp, ip, ip6}_tables Patrick McHardy
2006-11-17 5:35 ` [NETFILTER 05/08]: arp_tables: missing unregistration on module unload Patrick McHardy
2006-11-17 5:35 ` [NETFILTER 06/08]: Honour source routing for LVS-NAT Patrick McHardy
2006-11-17 5:35 ` [NETFILTER 07/08]: Kconfig: fix xt_physdev dependencies Patrick McHardy
2006-11-17 5:35 ` [NETFILTER 08/08]: xt_CONNSECMARK: fix Kconfig dependencies Patrick McHardy
2006-11-17 7:02 ` [stable] [NETFILTER 00/08]: Netfilter -stable fixes Chris Wright
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20061117053540.10231.92379.sendpatchset@localhost.localdomain \
--to=kaber@trash.net \
--cc=davem@davemloft.net \
--cc=netfilter-devel@lists.netfilter.org \
--cc=stable@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.