linux.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Expand)	Author
2024-03-01	netfilter: nf_tables: set dormant flag on hook register failure	Florian Westphal
2024-03-01	netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new	Xin Long
2024-02-23	netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()	Dan Carpenter
2024-02-23	netfilter: ipset: Missing gc cancellations fixed	Jozsef Kadlecsik
2024-02-23	netfilter: ipset: fix performance regression in swap operation	Jozsef Kadlecsik
2024-02-23	netfilter: nft_set_rbtree: skip end interval element from gc	Pablo Neira Ayuso
2024-02-23	netfilter: nft_set_pipapo: remove scratch_aligned pointer	Florian Westphal
2024-02-23	netfilter: nft_set_pipapo: add helper to release pcpu scratch area	Florian Westphal
2024-02-23	netfilter: nft_set_pipapo: store index in scratch maps	Florian Westphal
2024-02-23	netfilter: nft_ct: reject direction for ct id	Pablo Neira Ayuso
2024-02-23	netfilter: nft_compat: restrict match/target protocol to u16	Pablo Neira Ayuso
2024-02-23	netfilter: nft_compat: reject unused compat flag	Pablo Neira Ayuso
2024-02-23	netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations	Pablo Neira Ayuso
2024-02-23	netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger	Pablo Neira Ayuso
2024-02-23	netfilter: nf_tables: reject QUEUE/DROP verdict parameters	Florian Westphal
2024-02-23	netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain	Pablo Neira Ayuso
2024-02-23	netfilter: nf_tables: validate NFPROTO_* family	Pablo Neira Ayuso
2024-02-23	netfilter: nf_tables: restrict anonymous set and map names to 16 bytes	Florian Westphal
2024-01-25	ipvs: avoid stat macros calls from preemptible context	Fedor Pchelkin
2024-01-25	netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description	Pablo Neira Ayuso
2024-01-25	netfilter: nf_tables: skip dead set elements in netlink dump	Pablo Neira Ayuso
2024-01-25	netfilter: nf_tables: do not allow mismatch field size and set key length	Pablo Neira Ayuso
2024-01-25	netfilter: nf_tables: mark newset as dead on transaction abort	Florian Westphal
2024-01-15	netfilter: nf_tables: Reject tables of unsupported family	Phil Sutter
2024-01-15	netfilter: nft_immediate: drop chain reference counter on error	Pablo Neira Ayuso
2024-01-15	netfilter: nftables: add loop check helper function	Pablo Neira Ayuso
2024-01-05	netfilter: nf_tables: skip set commit for deleted/destroyed sets	Pablo Neira Ayuso
2023-12-20	netfilter: nf_tables: fix 'exist' matching on bigendian arches	Florian Westphal
2023-12-13	netfilter: nft_set_pipapo: skip inactive elements during set walk	Florian Westphal
2023-12-13	netfilter: xt_owner: Fix for unsafe access of sk->sk_socket	Phil Sutter
2023-12-13	netfilter: ipset: fix race condition between swap/destroy and kernel side add...	Jozsef Kadlecsik
2023-11-28	netfilter: nf_tables: disable toggling dormant table state more than once	Pablo Neira Ayuso
2023-11-28	netfilter: nf_tables: fix table flag updates	Pablo Neira Ayuso
2023-11-28	netfilter: nftables: update table flags from the commit phase	Pablo Neira Ayuso
2023-11-20	netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses	Florian Westphal
2023-11-20	netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate e...	Jeremy Sowden
2023-11-20	netfilter: xt_recent: fix (increase) ipv6 literal buffer length	Maciej Żenczykowski
2023-11-08	netfilter: nfnetlink_log: silence bogus compiler warning	Florian Westphal
2023-10-25	netfilter: nft_set_rbtree: .deactivate fails if element has expired	Pablo Neira Ayuso
2023-10-25	netfilter: nft_payload: fix wrong mac header matching	Florian Westphal
2023-10-25	net: prevent address rewrite in kernel_bind()	Jordan Rife
2023-10-10	netfilter: nftables: exthdr: fix 4-byte stack OOB write	Florian Westphal
2023-10-10	netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure	Florian Westphal
2023-10-10	netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp	Xin Long
2023-10-10	net: replace calls to sock->ops->connect() with kernel_connect()	Jordan Rife
2023-10-10	netfilter: nf_tables: disallow rule removal from chain binding	Pablo Neira Ayuso
2023-10-10	netfilter: nft_exthdr: Fix for unsafe packet data read	Phil Sutter
2023-10-10	netfilter: nft_exthdr: Search chunks in SCTP packets only	Phil Sutter
2023-10-10	netfilter: nft_exthdr: Fix non-linear header modification	Xiao Liang
2023-10-10	netfilter: exthdr: add support for tcp option removal	Florian Westphal