From: Pablo Neira Ayuso <pablo@netfilter.org>
To: netfilter-devel@vger.kernel.org
Cc: davem@davemloft.net, netdev@vger.kernel.org
Subject: [PATCH 0/7] Netfilter updates for net-next
Date: Sun, 2 Aug 2020 20:31:41 +0200 [thread overview]
Message-ID: <20200802183149.2808-1-pablo@netfilter.org> (raw)
Hi,
1) UAF in chain binding support from previous batch, from Dan Carpenter.
2) Queue up delayed work to expire connections with no destination,
from Andrew Sy Kim.
3) Use fallthrough pseudo-keyword, from Gustavo A. R. Silva.
4) Replace HTTP links with HTTPS, from Alexander A. Klimov.
5) Remove superfluous null header checks in ip6tables, from
Gaurav Singh.
6) Add extended netlink error reporting for expression.
7) Report EEXIST on overlapping chain, set elements and flowtable
devices.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
Thank you.
----------------------------------------------------------------
The following changes since commit 4ff91fa0a3acd072c9a46ebe08a6e2471ddd3c95:
Merge branch 'udp_tunnel-NIC-RX-port-offload-infrastructure' (2020-07-14 17:04:28 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git HEAD
for you to fetch changes up to 77a92189ecfd061616ad531d386639aab7baaad9:
netfilter: nf_tables: report EEXIST on overlaps (2020-08-02 19:53:45 +0200)
----------------------------------------------------------------
Alexander A. Klimov (1):
netfilter: Replace HTTP links with HTTPS ones
Andrew Sy Kim (1):
ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1
Dan Carpenter (1):
netfilter: nf_tables: Fix a use after free in nft_immediate_destroy()
Gaurav Singh (1):
netfilter: ip6tables: Remove redundant null checks
Gustavo A. R. Silva (1):
netfilter: Use fallthrough pseudo-keyword
Pablo Neira Ayuso (2):
netfilter: nf_tables: extended netlink error reporting for expressions
netfilter: nf_tables: report EEXIST on overlaps
include/net/ip_vs.h | 29 ++++++++++++++++++
include/uapi/linux/netfilter/xt_connmark.h | 2 +-
net/bridge/netfilter/ebtables.c | 2 +-
net/decnet/netfilter/dn_rtmsg.c | 2 +-
net/ipv6/netfilter/ip6t_ah.c | 3 +-
net/ipv6/netfilter/ip6t_frag.c | 3 +-
net/ipv6/netfilter/ip6t_hbh.c | 3 +-
net/ipv6/netfilter/ip6t_rt.c | 3 +-
net/netfilter/Kconfig | 2 +-
net/netfilter/ipset/ip_set_core.c | 2 +-
net/netfilter/ipvs/ip_vs_conn.c | 39 +++++++++++++++++++++++++
net/netfilter/ipvs/ip_vs_core.c | 47 +++++++++++++-----------------
net/netfilter/ipvs/ip_vs_ctl.c | 22 ++++++++++++++
net/netfilter/nf_conntrack_h323_asn1.c | 6 ++--
net/netfilter/nf_conntrack_proto.c | 2 +-
net/netfilter/nf_conntrack_proto_tcp.c | 2 +-
net/netfilter/nf_conntrack_standalone.c | 2 +-
net/netfilter/nf_nat_core.c | 12 ++++----
net/netfilter/nf_synproxy_core.c | 6 ++--
net/netfilter/nf_tables_api.c | 31 +++++++++++---------
net/netfilter/nf_tables_core.c | 2 +-
net/netfilter/nfnetlink_acct.c | 2 +-
net/netfilter/nfnetlink_cttimeout.c | 2 +-
net/netfilter/nft_cmp.c | 4 +--
net/netfilter/nft_ct.c | 6 ++--
net/netfilter/nft_fib.c | 2 +-
net/netfilter/nft_immediate.c | 4 +--
net/netfilter/nft_payload.c | 2 +-
net/netfilter/nft_set_pipapo.c | 4 +--
net/netfilter/utils.c | 8 ++---
net/netfilter/x_tables.c | 2 +-
net/netfilter/xt_CONNSECMARK.c | 2 +-
net/netfilter/xt_connmark.c | 2 +-
net/netfilter/xt_nfacct.c | 2 +-
net/netfilter/xt_time.c | 2 +-
35 files changed, 173 insertions(+), 93 deletions(-)
next reply other threads:[~2020-08-02 18:32 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-08-02 18:31 Pablo Neira Ayuso [this message]
2020-08-02 18:31 ` [PATCH 1/7] netfilter: nf_tables: Fix a use after free in nft_immediate_destroy() Pablo Neira Ayuso
2020-08-02 18:31 ` [PATCH 2/7] ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1 Pablo Neira Ayuso
2020-08-02 18:31 ` [PATCH 3/7] netfilter: Use fallthrough pseudo-keyword Pablo Neira Ayuso
2020-08-02 18:31 ` [PATCH 4/7] netfilter: Replace HTTP links with HTTPS ones Pablo Neira Ayuso
2020-08-02 18:31 ` [PATCH 5/7] netfilter: ip6tables: Remove redundant null checks Pablo Neira Ayuso
2020-08-02 18:31 ` [PATCH 6/7] netfilter: nf_tables: extended netlink error reporting for expressions Pablo Neira Ayuso
2020-08-02 18:31 ` [PATCH 7/7] netfilter: nf_tables: report EEXIST on overlaps Pablo Neira Ayuso
2020-08-03 23:03 ` [PATCH 0/7] Netfilter updates for net-next David Miller
-- strict thread matches above, loose matches on Subject: below --
2013-02-19 0:10 [PATCH 0/7] netfilter " pablo
2013-02-19 5:44 ` David Miller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200802183149.2808-1-pablo@netfilter.org \
--to=pablo@netfilter.org \
--cc=davem@davemloft.net \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).