Patch for Linux kernel 3.10: netfilter: nf_conntrack: avoid large timeout for mid-stream pickup

[Pavel Chekin]

There is a patch (https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6547a221871f139cc56328a38105d47c14874cbe) included in kernel 3.11.

We need to patch CentOS kernel, which is 3.10.30.

[Alexei Sheplyakov (asheplyakov)]

We are going to update the -lt kernel to 3.10.46 (in order to address several security issues). I'll check if the patch in question has been backported

[Alexei Sheplyakov (asheplyakov)]

Security update for kernel-lt (basically update to the latest upstream version, which is 3.10.46 at the time of writing):
http://gerrit.mirantis.com/17642
The patch in question is NOT included in the upstream version, I'm working on a backport.

[Alexei Sheplyakov (asheplyakov)]

Upd: the patch is being reviewed at the moment: https://gerrit.mirantis.com/#/c/17642

[Alexei Sheplyakov (asheplyakov)]

The fix has been merged

[OSCI Robot (oscirobot)]

Package kernel-lt has been built from changeset: http://gerrit.mirantis.com/29557
RPM Repository URL: http:///osci-obs.vm.mirantis.net:82/centos-fuel-6.0-stable-29557/centos

[OSCI Robot (oscirobot)]

Package kernel-lt has been built from changeset: http://gerrit.mirantis.com/29557
RPM Repository URL: http:///osci-obs.vm.mirantis.net:82/centos-fuel-6.0-stable/centos