Accepting request 705874 from security:netfilter

- Update to new upstream release 1.8.3

OBS-URL: https://build.opensuse.org/request/show/705874
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iptables?expand=0&rev=68

iptables-1.8.2.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a3778b50ed1a3256f9ca975de82c2204e508001fc2471238c8c97f3d1c4c12af
-size 679858

iptables-1.8.3.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a23cac034181206b4545f4e7e730e76e08b5f3dd78771ba9645a6756de9cdd80
+size 716257

iptables.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Tue May 28 08:37:39 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to new upstream release 1.8.3
+  * ebtables: Fix rule listing with counters
+  * ebtables-nft: Support user-defined chain policies
+- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
+  0001-include-fix-build-with-kernel-headers-before-4.2.patch
+  (upstreamed)
+
+-------------------------------------------------------------------
+Wed May 22 16:15:28 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
+
+- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
+  0001-include-extend-the-headers-conflict-workaround-to-in.patch
+  to fix build with older linux-glibc-devel. [boo#1132821]
+
 -------------------------------------------------------------------
 Thu Apr  4 11:44:31 UTC 2019 - Kristýna Streitová <kstreitova@suse.com>
 

iptables.spec

@@ -17,7 +17,7 @@
 
 
 Name:           iptables
-Version:        1.8.2
+Version:        1.8.3
 Release:        0
 Summary:        IP packet filter administration utilities
 License:        GPL-2.0-only AND Artistic-2.0
@@ -43,7 +43,7 @@ BuildRequires:  xz
 BuildRequires:  pkgconfig(libmnl) >= 1.0
 BuildRequires:  pkgconfig(libnetfilter_conntrack) >= 1.0.4
 BuildRequires:  pkgconfig(libnfnetlink) >= 1.0.0
-BuildRequires:  pkgconfig(libnftnl) >= 1.1.1
+BuildRequires:  pkgconfig(libnftnl) >= 1.1.3
 Requires:       netcfg >= 11.6
 Requires:       xtables-plugins = %version-%release
 Requires(post): update-alternatives
@@ -101,18 +101,29 @@ be modified in userspace prior to reinjection back into the kernel.
 
 ip_queue/libipq is obsoleted by nf_queue/libnetfilter_queue!
 
-%package -n libiptc0
+%package -n libip4tc2
-Summary:        Library for the ip_tables low-level ruleset generation and parsing
+Summary:        Library for the ip_tables low-level ruleset generation and parsing (IPv4)
 Group:          System/Libraries
 
-%description -n libiptc0
+%description -n libip4tc2
 libiptc ("iptables cache") is used to retrieve from the kernel, parse,
 construct, and load rulesets into the kernel.
+This package contains the iptc IPv4 API.
+
+%package -n libip6tc2
+Summary:        Library for the ip_tables low-level ruleset generation and parsing (IPv6)
+Group:          System/Libraries
+
+%description -n libip6tc2
+libiptc ("iptables cache") is used to retrieve from the kernel, parse,
+construct, and load rulesets into the kernel.
+This package contains the iptc IPv6 API.
 
 %package -n libiptc-devel
 Summary:        Development files for libiptc, a packet filter ruleset library
 Group:          Development/Libraries/C and C++
-Requires:       libiptc0 = %version
+Requires:       libip4tc2 = %version
+Requires:       libip6tc2 = %version
 
 %description -n libiptc-devel
 libiptc ("iptables cache") is used to retrieve from the kernel, parse,
@@ -156,6 +167,8 @@ make %{?_smp_mflags} V=1
 %install
 %make_install
 b="%buildroot"
+# no contents and is unused; proposed for removal upstream
+rm -f "$b/%_libdir/"libiptc.so*
 # iptables-apply is not installed by upstream Makefile
 install -m0755 iptables/iptables-apply "$b/%_sbindir/"
 install -m0644 iptables/iptables-apply.8 "$b/%_mandir/man8/"
@@ -209,8 +222,10 @@ fi
 
 %post   -n libipq0 -p /sbin/ldconfig
 %postun -n libipq0 -p /sbin/ldconfig
-%post   -n libiptc0 -p /sbin/ldconfig
+%post   -n libip4tc2 -p /sbin/ldconfig
-%postun -n libiptc0 -p /sbin/ldconfig
+%postun -n libip4tc2 -p /sbin/ldconfig
+%post   -n libip6tc2 -p /sbin/ldconfig
+%postun -n libip6tc2 -p /sbin/ldconfig
 %post   -n libxtables12 -p /sbin/ldconfig
 %postun -n libxtables12 -p /sbin/ldconfig
 
@@ -286,10 +301,11 @@ fi
 %_libdir/libipq.so
 %_libdir/pkgconfig/libipq.pc
 
-%files -n libiptc0
+%files -n libip4tc2
-%_libdir/libiptc.so.0*
+%_libdir/libip4tc.so.2*
-%_libdir/libip4tc.so.0*
+
-%_libdir/libip6tc.so.0*
+%files -n libip6tc2
+%_libdir/libip6tc.so.2*
 
 %files -n libiptc-devel
 %dir %_includedir/%name/