From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bernhard Schmidt Subject: Re: 2.6.20-rc4: known unfixed regressions Date: Mon, 08 Jan 2007 02:20:02 +0100 Message-ID: <45A19C42.8080109@birkenwald.de> References: <20070108002208.GO20714@stusta.de> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Andrew Morton , Linus Torvalds , netfilter-devel@lists.netfilter.org, Linux Kernel Mailing List Return-path: To: Adrian Bunk In-Reply-To: <20070108002208.GO20714@stusta.de> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Adrian Bunk wrote: > This email lists some known regressions in 2.6.20-rc4 compared to 2.6.19. > Subject : netfilter conntrack Oopses > References : http://lkml.org/lkml/2007/1/4/156 Netfilter bugzilla #528 https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=528 fixed, I think the patch is in -rc4 already (it is listed in the "Merge /pub/scm/linux/kernel/git/davem/net-2.6" on Jan. 4th in the git browser) > http://lkml.org/lkml/2007/1/7/188 Netfilter bugzilla #529 https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=529 no patch available yet, remote DoS attack for 2.6.20-rc3, not excluded this has been the case since nf_conntrack_ipv6 was available (2.6.16 or so), UDPv6 fragments are rare in the wild and a large number of users could not use nf_conntrack_ipv6 up to now due to incompatibility with IPv4 NAT code. Regards, Bernhard From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S965290AbXAHBUI (ORCPT ); Sun, 7 Jan 2007 20:20:08 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S965291AbXAHBUI (ORCPT ); Sun, 7 Jan 2007 20:20:08 -0500 Received: from vs02.svr02.mucip.net ([83.170.6.69]:49046 "EHLO mx01.mucip.net" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S965290AbXAHBUG (ORCPT ); Sun, 7 Jan 2007 20:20:06 -0500 Message-ID: <45A19C42.8080109@birkenwald.de> Date: Mon, 08 Jan 2007 02:20:02 +0100 From: Bernhard Schmidt User-Agent: Thunderbird 1.5.0.9 (X11/20070103) MIME-Version: 1.0 To: Adrian Bunk CC: Linus Torvalds , Andrew Morton , Linux Kernel Mailing List , netfilter-devel@lists.netfilter.org Subject: Re: 2.6.20-rc4: known unfixed regressions References: <20070108002208.GO20714@stusta.de> In-Reply-To: <20070108002208.GO20714@stusta.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Adrian Bunk wrote: > This email lists some known regressions in 2.6.20-rc4 compared to 2.6.19. > Subject : netfilter conntrack Oopses > References : http://lkml.org/lkml/2007/1/4/156 Netfilter bugzilla #528 https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=528 fixed, I think the patch is in -rc4 already (it is listed in the "Merge /pub/scm/linux/kernel/git/davem/net-2.6" on Jan. 4th in the git browser) > http://lkml.org/lkml/2007/1/7/188 Netfilter bugzilla #529 https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=529 no patch available yet, remote DoS attack for 2.6.20-rc3, not excluded this has been the case since nf_conntrack_ipv6 was available (2.6.16 or so), UDPv6 fragments are rare in the wild and a large number of users could not use nf_conntrack_ipv6 up to now due to incompatibility with IPv4 NAT code. Regards, Bernhard