* [ANNOUNCE] ipset 7.20 released
@ 2024-01-31 16:39 Jozsef Kadlecsik
0 siblings, 0 replies; only message in thread
From: Jozsef Kadlecsik @ 2024-01-31 16:39 UTC (permalink / raw)
To: netfilter, netfilter-devel
Hi,
I'm happy to announce ipset 7.20: besides two json output corrections, it
contains an important race condition fix between swap/destroy and kernel
side add/del/test operation. In order to find the best solution to fix the
issue without slowing down any operations and keeping the internal rules
where execution may wait for concurrent operations to complete, there were
several iterations of the patch.
Userspace changes:
- Ignore *.order.cmd and *.symvers.cmd files in kernel builds
- Bash completion utility updated
- Fix json output for -name option (Mark)
- Fix hex literals in json output
- tests: increase timeout to cope with slow virtual test machine
Kernel part changes:
- treewide: Convert del_timer*() to timer_shutdown*() (Steven Rostedt)
- Use timer_shutdown_sync() when available, instead of del_timer_sync()
- netfilter: ipset: fix race condition between swap/destroy and kernel
side add/del/test v4
- netfilter: ipset: fix race condition between swap/destroy and kernel
side add/del/test v3
- netfilter: ipset: fix race condition between swap/destroy and kernel
side add/del/test v2
- netfilter: ipset: fix race condition between swap/destroy and kernel
side add/del/test
You can download the source code of ipset from:
https://ipset.netfilter.org
git://git.netfilter.org/ipset.git
Best regards,
Jozsef
--
E-mail : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.hu
PGP key : https://wigner.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics
H-1525 Budapest 114, POB. 49, Hungary
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2024-01-31 16:39 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2024-01-31 16:39 [ANNOUNCE] ipset 7.20 released Jozsef Kadlecsik
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).