From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail.netfilter.org (mail.netfilter.org [217.70.188.207]) by smtp.subspace.kernel.org (Postfix) with ESMTP id C4AA017BB26; Mon, 12 Aug 2024 10:29:29 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=217.70.188.207 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1723458571; cv=none; b=Bb8yiBeJo4ybj1w517LIcdhinlm37SDVFe1+SIiw84vnZNmCxwZo1vfMAL3sc/USO0gwnjyP/8sLtOP0ix83vegHfWkF9nJGRUcEj9t6cTUKx4bMjzLW+lPQ4DvA2/IH7D3yZMNKlfmJ+/D59hUYcuSoEb9EeOn+dQ52PPC2fD8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1723458571; c=relaxed/simple; bh=7E1bpeTcovuGLs10CRXkJz6EFNWqxcYpFQOsCcaOGys=; h=From:To:Cc:Subject:Date:Message-Id:MIME-Version; b=jL59FclecyU16QspSDNTB1whE5eC2sTJTb4zTd6NHmaFSD+3QVU/kLOibmytILKdGlbxhaX8e/M+7RS/LmTeBjcC/7j4CHUUeIh7bEQ7v7+tVxoaLqrOxXxU8jHe1UsWCBZZbLIEvb9QqGTDoQACxDX5GhPC+Udy2XFe8WnlOq4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=netfilter.org; spf=pass smtp.mailfrom=netfilter.org; arc=none smtp.client-ip=217.70.188.207 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=netfilter.org Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=netfilter.org From: Pablo Neira Ayuso To: netfilter-devel@vger.kernel.org Cc: gregkh@linuxfoundation.org, sashal@kernel.org, stable@vger.kernel.org Subject: [PATCH -stable,4.19.x 0/3] Netfilter fixes for -stable Date: Mon, 12 Aug 2024 12:29:22 +0200 Message-Id: <20240812102925.394733-1-pablo@netfilter.org> X-Mailer: git-send-email 2.30.2 Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Hi Greg, Sasha, This batch contains a backport for recent fixes already upstream for 4.19.x. The following list shows the backported patches, I am using original commit IDs for reference: 1) b53c11664250 ("netfilter: nf_tables: set element extended ACK reporting support") 2) 7395dfacfff6 ("netfilter: nf_tables: use timestamp to check for set element timeout") 3) cff3bd012a95 ("netfilter: nf_tables: prefer nft_chain_validate") Please, apply, Thanks Florian Westphal (1): netfilter: nf_tables: prefer nft_chain_validate Pablo Neira Ayuso (2): netfilter: nf_tables: set element extended ACK reporting support netfilter: nf_tables: use timestamp to check for set element timeout include/net/netfilter/nf_tables.h | 21 ++++- net/netfilter/nf_tables_api.c | 128 ++++++------------------------ net/netfilter/nft_set_hash.c | 8 +- net/netfilter/nft_set_rbtree.c | 6 +- 4 files changed, 53 insertions(+), 110 deletions(-) -- 2.30.2