kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
2021-05-22	netfilter: conntrack: Make global sysctls readonly in non-init netns	Jonathon Reinhart	1	-1/+4
2021-05-22	netfilter: nftables: avoid overflows in nft_hash_buckets()	Eric Dumazet	1	-1/+9
2021-04-28	netfilter: nft_limit: avoid possible divide error in nft_limit_init	Eric Dumazet	1	-2/+2
2021-04-28	netfilter: conntrack: do not print icmpv6 as unknown via /proc	Pablo Neira Ayuso	1	-0/+1
2021-04-16	netfilter: x_tables: fix compat match/target pad out-of-bound write	Florian Westphal	1	-8/+2
2021-03-17	netfilter: x_tables: gpf inside xt_find_revision()	Vasily Averin	1	-2/+4
2021-02-23	netfilter: conntrack: skip identical origin tuple in same zone only	Florian Westphal	1	-1/+2
2021-02-23	netfilter: xt_recent: Fix attempt to update deleted entry	Jozsef Kadlecsik	1	-2/+10
2021-02-04	netfilter: nft_dynset: add timeout extension to template	Pablo Neira Ayuso	1	-1/+3
2021-01-23	netfilter: conntrack: fix reading nf_conntrack_buckets	Jesper Dangaard Brouer	1	-0/+3
2021-01-12	netfilter: xt_RATEEST: reject non-null terminated string from userspace	Florian Westphal	1	-0/+3
2021-01-12	netfilter: ipset: fix shift-out-of-bounds in htable_bits()	Vasily Averin	1	-15/+5
2020-10-29	ipvs: Fix uninit-value in do_ip_vs_set_ctl()	Peilin Ye	1	-3/+4
2020-10-14	netfilter: ctnetlink: add a range check for l3/l4 protonum	Will McVicker	1	-0/+2
2020-09-09	netfilter: nf_tables: fix destination register zeroing	Florian Westphal	1	-1/+3
2020-09-09	netfilter: nf_tables: add NFTA_SET_USERDATA if not null	Pablo Neira Ayuso	1	-1/+2
2020-08-21	ipvs: allow connection reuse for unconfirmed conntrack	Julian Anastasov	1	-5/+7
2020-07-29	ipvs: fix the connection sync failed in some cases	guodeqing	1	-4/+8
2020-06-30	netfilter: ipset: fix unaligned atomic access	Russell King	1	-0/+2
2020-06-20	netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported	Pablo Neira Ayuso	1	-2/+2
2020-06-03	netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build	Pablo Neira Ayuso	1	-1/+1
2020-06-03	netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code	Pablo Neira Ayuso	1	-27/+35
2020-06-03	netfilter: nfnetlink_cthelper: unbreak userspace helper support	Pablo Neira Ayuso	1	-1/+2
2020-06-03	netfilter: ipset: Fix subcounter update skip	Phil Sutter	1	-1/+1
2020-05-20	netfilter: conntrack: avoid gcc-10 zero-length-bounds warning	Arnd Bergmann	1	-2/+2
2020-05-20	netfilter: nat: never update the UDP checksum when it's 0	Guillaume Nault	1	-3/+2
2020-04-24	netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type	Pablo Neira Ayuso	1	-2/+2
2020-04-02	netfilter: nft_fwd_netdev: validate family and chain type	Pablo Neira Ayuso	1	-0/+8
2020-03-20	netfilter: nft_payload: add missing attribute validation for payload csum flags	Jakub Kicinski	1	-0/+1
2020-03-20	netfilter: cthelper: add missing attribute validation for cthelper	Jakub Kicinski	1	-0/+2
2020-03-11	netfilter: nf_conntrack: resolve clash for matching conntracks	Martynas Pumputis	1	-8/+22
2020-02-28	netfilter: xt_hashlimit: limit the max size of hashtable	Cong Wang	1	-0/+10
2020-01-29	netfilter: ipset: use bitmap infrastructure completely	Kadlecsik József	4	-10/+10
2020-01-27	netfilter: nft_set_hash: fix lookups with fixed size hash on big endian	Pablo Neira Ayuso	1	-4/+19
2020-01-23	netfilter: fix a use-after-free in mtype_destroy()	Cong Wang	1	-1/+1
2020-01-14	netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present	Florian Westphal	1	-1/+2
2020-01-12	netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END	Pablo Neira Ayuso	1	-3/+9
2020-01-12	netfilter: ctnetlink: netns exit must wait for callbacks	Florian Westphal	1	-0/+3
2020-01-04	net: add bool confirm_neigh parameter for dst_ops.update_pmtu	Hangbin Liu	1	-1/+1
2020-01-04	netfilter: nf_queue: enqueue skbs with NULL dst	Marco Oliverio	1	-1/+1
2019-11-24	netfilter: nft_compat: do not dump private area	Pablo Neira Ayuso	1	-2/+22
2019-11-12	ipvs: move old_secure_tcp into struct netns_ipvs	Eric Dumazet	1	-8/+7
2019-11-12	ipvs: don't ignore errors in case refcounting ip_vs module fails	Davide Caratti	5	-17/+28
2019-11-12	netfilter: ipset: Fix an error code in ip_set_sockfn_get()	Dan Carpenter	1	-3/+5
2019-10-11	netfilter: nf_tables: allow lookups in dynamic sets	Florian Westphal	2	-5/+5
2019-09-21	netfilter: nf_conntrack_ftp: Fix debug output	Thomas Jarosch	1	-1/+1
2019-09-21	netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info	Juliana Rodrigueiro	1	-11/+25
2019-08-29	netfilter: ipset: Fix rename concurrency with listing	Jozsef Kadlecsik	1	-1/+1
2019-08-25	netfilter: conntrack: Use consistent ct id hash calculation	Dirk Morris	1	-8/+8
2019-08-16	netfilter: nft_hash: fix symhash with modulus one	Laura Garcia Liebana	1	-1/+1