Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #874788

Bug#872907: Backporting "netfilter: xt_hashlimit: Fix integer divide round to zero." to stable kernels

From Cyril Brulebois <cyril@debamax.com>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#872907: Backporting "netfilter: xt_hashlimit: Fix integer divide round to zero." to stable kernels
Date 2018-01-12 01:40 +0100
Message-ID <v6Vy2-dD-3@gated-at.bofh.it> (permalink)
References <uheLf-14J-1@gated-at.bofh.it>
Organization DEBAMAX

Cross-posted to 2 groups.

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Hi,

A customer of mine has been hitting hashlimits issues in netfilter by
switching from Debian 8 (3.16.y) to Debian 9 (4.9.y), making iptables
hashlimits unusable for production.

This issue has been fixed in mainline with this commit:
| commit ad5b55761956427f61ed9c96961bf9c5cd4f92dc
| Author: Alban Browaeys <alban.browaeys@gmail.com>
| Date:   Mon Feb 6 23:50:33 2017 +0100
| 
|     netfilter: xt_hashlimit: Fix integer divide round to zero.

Backporting this commit to Debian 9's 4.9.y kernel series has been
confirmed to fix the bug there. It might be worth considering it for
other stable kernels though.

Downstream bug reports:
  https://bugs.debian.org/872907
  https://bugs.debian.org/884983

Thanks for considering.


Cheers,
-- 
Cyril Brulebois -- Debian Consultant @ DEBAMAX -- https://debamax.com/

Back to linux.debian.bugs.dist | Previous | Next | Find similar | Unroll thread


Thread

Bug#872907: Backporting "netfilter: xt_hashlimit: Fix integer divide round to zero." to stable kernels Cyril Brulebois <cyril@debamax.com> - 2018-01-12 01:40 +0100

csiph-web