| [-mainline] netfilter: ipset: small potential read beyond the end of buffer |
0
0
0
|
2014-11-10 |
Pablo Neira |
pablo |
Accepted |
| [-mainline] netfilter: ipset: small potential read beyond the end of buffer |
1
0
0
|
2014-11-07 |
Dan Carpenter |
pablo |
Superseded |
| [-next,1/2] netfilter: ctnetlink: refactor ctnetlink_create_expect |
0
0
0
|
2013-08-08 |
Pablo Neira |
|
Superseded |
| [-next,1/2] netfilter: nf_queue: cleanup copy_range usage |
0
0
0
|
2013-06-05 |
Florian Westphal |
|
Accepted |
| [-next,2/2] netfilter: Convert print_tuple functions to return void |
0
0
0
|
2013-12-12 |
Joe Perches |
|
Awaiting Upstream |
| [-next,2/2] netfilter: nfnetlink_queue: allow to attach expectations to conntracks |
0
0
0
|
2013-08-08 |
Pablo Neira |
|
Superseded |
| [-next,2/2] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed |
0
0
0
|
2013-06-05 |
Florian Westphal |
|
Accepted |
| [-next,2/2] seq_putc: Convert to return void and convert uses too. |
1
2
0
|
2014-11-10 |
Joe Perches |
pablo |
Awaiting Upstream |
| [-next,3/3] netfilter: Use seq_overflow |
0
0
0
|
2013-12-11 |
Joe Perches |
|
Not Applicable |
| [-next,resend] netfilter: nfnetlink_queue: avoid peer_portid test |
0
0
0
|
2013-05-25 |
Florian Westphal |
|
Accepted |
| [-next,v2,0/5] netfilter: nf_queue: avoid expensive gso/checksums |
0
0
0
|
2013-04-19 |
Florian Westphal |
|
Accepted |
| [-next] Revert "netfilter: tproxy: do not assign timewait sockets to skb->sk" |
0
0
0
|
2013-05-29 |
Florian Westphal |
pablo |
Changes Requested |
| [-next] netfilter: bridge: optionally set indev to vlan |
0
0
0
|
2012-04-04 |
Florian Westphal |
|
Superseded |
| [-next] netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module |
0
0
0
|
2014-11-26 |
Pablo Neira |
pablo |
Accepted |
| [-next] netfilter: connlimit: fix UP build |
0
0
0
|
2014-03-17 |
Florian Westphal |
|
Accepted |
| [-next] netfilter: conntrack: drop new packets that lose race against get_next_corpse() |
0
0
0
|
2014-11-24 |
Pablo Neira |
pablo |
Superseded |
| [-next] netfilter: conntrack: remove timer from ecache extension |
0
0
0
|
2014-03-27 |
Florian Westphal |
|
Deferred |
| [-next] netfilter: nf_conntrack_standalone: fix error return code |
0
0
0
|
2013-03-27 |
Wei Yongjun |
|
Accepted |
| [-next] netfilter: nf_nat: missing condition in nf_xfrm_me_harder() |
0
0
0
|
2013-04-24 |
Dan Carpenter |
|
Accepted |
| [-next] netfilter: nf_tables: remove duplicated include from nf_tables_ipv4.c |
0
0
0
|
2013-10-30 |
Wei Yongjun |
|
Accepted |
| [-next] netfilter: nfnetlink_queue: fix error return code in nfnetlink_queue_init() |
0
0
0
|
2013-03-22 |
Wei Yongjun |
|
Accepted |
| [-next] netfilter: nfnetlink_queue: only add CAP_LEN attr when needed |
0
0
0
|
2013-05-29 |
Florian Westphal |
pablo |
Changes Requested |
| [-next] netfilter: tproxy: fix build with IP6_NF_IPTABLES=n |
0
0
0
|
2013-08-04 |
Florian Westphal |
|
Accepted |
| [-next] netfilter: use kfree_skb() not kfree() |
0
0
0
|
2012-06-30 |
Dan Carpenter |
|
Accepted |
| [-next] netfilter: xt_connlimit: honor conntrack zone if available |
0
0
0
|
2014-11-14 |
Florian Westphal |
pablo |
Accepted |
| [-next] netfilter: xt_recent: relax ip_pkt_list_tot restrictions |
0
0
0
|
2014-11-27 |
Pablo Neira |
pablo |
RFC |
| [-next] netfilter: xt_recent: relax ip_pkt_list_tot restrictions |
0
0
0
|
2014-11-24 |
Florian Westphal |
pablo |
Accepted |
| [-nf] nft: masq: fix uninitialized range in nft_masq_{ipv4,ipv6}_eval |
1
0
0
|
2014-11-07 |
Daniel Borkmann |
pablo |
Accepted |
| [-nft] src: add rule batching support |
0
0
0
|
2013-09-22 |
Pablo Neira |
|
Accepted |
| [-nftables,1/3] netfilter: nf_tables: allow to dump all existing sets |
0
0
0
|
2013-09-19 |
Pablo Neira |
|
Accepted |
| [-nftables,2/3] netfilter: nf_tables: nft_meta: fix socket uid,gid handling |
0
0
0
|
2013-09-19 |
Pablo Neira |
|
Accepted |
| [-nftables,3/3] netfilter: fix missing dependency |
0
0
0
|
2013-09-19 |
Pablo Neira |
|
Accepted |
| [-nftables,v2,1/4] netfilter: nf_tables: get rid of per rule list_head for commits |
0
0
0
|
2013-09-17 |
Pablo Neira |
|
Superseded |
| [-nftables,v2,2/4] netfilter: nf_tables: use per netns commit list |
0
0
0
|
2013-09-17 |
Pablo Neira |
|
Accepted |
| [-nftables,v2,3/4] netfilter: nfnetlink: add batch support and use it from nf_tables |
0
0
0
|
2013-09-17 |
Pablo Neira |
|
Accepted |
| [-nftables,v2,4/4] netfilter: nf_tables: all rule updates are transactional |
0
0
0
|
2013-09-17 |
Pablo Neira |
|
Superseded |
| [-nftables,v3,1/4] netfilter: nf_tables: get rid of per rule list_head for commits |
0
0
0
|
2013-09-17 |
Pablo Neira |
|
Accepted |
| [-nftables,v3,4/4] netfilter: nf_tables: all rule updates are transactional |
0
0
0
|
2013-09-17 |
Pablo Neira |
|
Accepted |
| [-stable-3.12] netfilter: fix wrong byte order in nf_ct_seqadj_set internal information |
0
0
0
|
2013-12-13 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.8.y,1/9] ipvs: ip_vs_sip_fill_param() BUG: bad check of return value |
1
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,2/9] netfilter: nf_nat: fix race when unloading protocol modules |
1
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,3/9] netfilter: ipset: list:set: fix reference counter update |
0
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,4/9] netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet |
0
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,5/9] netfilter: ipset: "Directory not empty" error message |
0
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,6/9] netfilter: nf_ct_helper: don't discard helper if it is actually the same |
0
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,7/9] netfilter: ctnetlink: don't permit ct creation with random tuple |
0
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,8/9] netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too |
0
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.8.y,9/9] netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths |
0
0
0
|
2013-05-06 |
Pablo Neira |
|
Accepted |
| [-stable-3.9,01/15] netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundary |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,02/15] netfilter: ipt_ULOG: fix non-null terminated string in the nf_log path |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,03/15] netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6 |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,04/15] ipvs: Fix reuse connection if real server is dead |
2
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,05/15] netfilter: xt_LOG: fix mark logging for IPv6 packets |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,06/15] ipvs: info leak in __ip_vs_get_dest_entries() |
1
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,07/15] netfilter: nfnetlink_cttimeout: fix incomplete dumping of objects |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,08/15] netfilter: nfnetlink_acct: fix incomplete dumping of objects |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,09/15] netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS option |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,10/15] netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr() |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,11/15] netfilter: xt_TCPMSS: Fix missing fragmentation handling |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,12/15] netfilter: xt_TCPMSS: Fix IPv6 default MSS too |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,13/15] ipvs: SCTP ports should be writable in ICMP packets |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,14/15] netfilter: nf_nat_sip: fix mangling |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-stable-3.9,15/15] netfilter: ctnetlink: send event when conntrack label was modified |
0
0
0
|
2013-07-02 |
Pablo Neira |
|
Awaiting Upstream |
| [-v2,22/26] net/netfilter: rename random32() to prandom_u32() |
0
0
0
|
2013-01-03 |
Akinobu Mita |
|
Not Applicable |
| [-v3,19/23] net/netfilter: rename random32() to prandom_u32() |
0
0
0
|
2013-03-04 |
Akinobu Mita |
|
Awaiting Upstream |
| [0/1] add hash:ip,mark data type to ipset |
0
0
0
|
2013-12-17 |
Vytas Dauksa |
kadlec |
Superseded |
| [0/1] ipset fix for nf/net |
0
0
0
|
2013-04-13 |
Jozsef Kadlecsik |
|
Accepted |
| [0/2] Handle invalid packets in conntrack consistently |
0
0
0
|
2012-04-09 |
Pablo Neira |
|
Accepted |
| [0/2] Netfilter fixes for net |
0
0
0
|
2014-11-20 |
Pablo Neira |
pablo |
Awaiting Upstream |
| [0/2] Netfilter fixes for net (3.11-rc1) |
0
0
0
|
2013-07-22 |
Pablo Neira |
|
Accepted |
| [0/2] Netfilter fixes for net-next |
0
0
0
|
2014-10-09 |
Pablo Neira |
pablo |
Awaiting Upstream |
| [0/2] ipset patches for nf-next |
0
0
0
|
2013-10-27 |
Jozsef Kadlecsik |
|
Accepted |
| [0/2] netfilter fixes for net |
0
0
0
|
2014-01-07 |
Pablo Neira |
|
Awaiting Upstream |
| [0/2] netfilter fixes for net |
0
0
0
|
2013-12-13 |
Pablo Neira |
|
Accepted |
| [0/2] netfilter fixes for net |
0
0
0
|
2013-04-19 |
Pablo Neira |
|
Accepted |
| [0/3,-,GIT,PULL] include/linux: Remove externs from networking function prototypes |
0
0
0
|
2013-09-26 |
Joe Perches |
|
Awaiting Upstream |
| [0/3] Netfilter fixes for net |
0
0
0
|
2014-04-14 |
Pablo Neira |
|
Awaiting Upstream |
| [0/3] Netfilter fixes for net |
0
0
0
|
2013-12-07 |
Pablo Neira |
|
Accepted |
| [0/3] Netfilter updates for net-next |
0
0
0
|
2014-01-16 |
Pablo Neira |
|
Awaiting Upstream |
| [0/3] Netfilter updates for net-next |
0
0
0
|
2014-01-16 |
Pablo Neira |
|
Superseded |
| [0/3] Netfilter updates for net-next |
0
0
0
|
2014-01-08 |
Pablo Neira |
|
Awaiting Upstream |
| [0/3] Netfilter/IPVS fixes for net |
0
0
0
|
2014-08-01 |
Pablo Neira |
pablo |
Awaiting Upstream |
| [0/3] Netfilter/IPVS updates for net-next |
0
0
0
|
2014-05-29 |
Pablo Neira |
|
Awaiting Upstream |
| [0/3] ipset patches for nf-next |
0
0
0
|
2013-10-18 |
Jozsef Kadlecsik |
|
Not Applicable |
| [0/3] netfilter fixes for net |
0
0
0
|
2013-10-23 |
Pablo Neira |
|
Accepted |
| [0/3] netfilter fixes for net |
0
0
0
|
2013-06-17 |
Pablo Neira |
|
Accepted |
| [0/4] Netfilter fixes for net |
0
0
0
|
2014-08-11 |
Pablo Neira |
pablo |
Awaiting Upstream |
| [0/4] Netfilter fixes for net (3.10-rc1) |
0
0
0
|
2013-05-16 |
Pablo Neira |
|
Accepted |
| [0/4] Netfilter/nf_tables fixes |
0
0
0
|
2014-07-15 |
Pablo Neira |
pablo |
Awaiting Upstream |
| [0/4] ipset patches for nf |
0
0
0
|
2013-09-16 |
Jozsef Kadlecsik |
|
Accepted |
| [0/4] ipset patches for nf-next |
0
0
0
|
2014-08-24 |
Jozsef Kadlecsik |
pablo |
Accepted |
| [0/4] netfilter fixes for 3.11-rc4 |
0
0
0
|
2013-08-10 |
Pablo Neira |
|
Accepted |
| [0/4] netfilter fixes for net |
0
0
0
|
2013-04-12 |
Pablo Neira |
|
Accepted |
| [0/4] netfilter updates for net-next |
0
0
0
|
2013-09-04 |
Pablo Neira |
|
Accepted |
| [0/4] netfilter updates for net-next (batch 3) |
0
0
0
|
2012-06-19 |
Pablo Neira |
|
Accepted |
| [0/5] Netfilter updates for net-next |
0
0
0
|
2013-04-19 |
Pablo Neira |
|
Accepted |
| [0/5] Netfilter/IPVS fixes for net |
0
0
0
|
2013-06-24 |
Pablo Neira |
|
Accepted |
| [0/5] netfilter fixes for 3.10-rc3 |
0
0
0
|
2013-05-29 |
Pablo Neira |
|
Accepted |
| [0/5] netfilter fixes for 3.10-rc5 |
0
0
0
|
2013-06-10 |
Pablo Neira |
|
Accepted |
| [0/5] netfilter updates for net-next (upcoming 3.5), batch 2 |
0
0
0
|
2012-05-14 |
Pablo Neira |
|
Not Applicable |
