Accepting request 1059873 from security:netfilter

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1059873
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iptables?expand=0&rev=80

iptables-1.8.8.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:71c75889dc710676631553eb1511da0177bbaaf1b551265b912d236c3f51859f
-size 746985

iptables-batch.patch

@@ -3,14 +3,14 @@
  iptables/iptables-batch.c |  468 ++++++++++++++++++++++++++++++++++++++++++++++
  2 files changed, 477 insertions(+)
 
-Index: iptables-1.8.6/iptables/Makefile.am
+Index: iptables-1.8.9/iptables/Makefile.am
 ===================================================================
---- iptables-1.8.6.orig/iptables/Makefile.am
-+++ iptables-1.8.6/iptables/Makefile.am
-@@ -138,3 +138,12 @@ uninstall-hook:
- 		); \
- 		( cd "$$dir" && rm -f ip6tables-apply ); \
+--- iptables-1.8.9.orig/iptables/Makefile.am
++++ iptables-1.8.9/iptables/Makefile.am
+@@ -147,3 +147,12 @@ uninstall-hook:
  	}
+ 
+ EXTRA_DIST = tests
 +
 +iptables_legacy_batch_SOURCES  = iptables-batch.c iptables.c xshared.c
 +iptables_legacy_batch_LDFLAGS  = ${xtables_legacy_multi_LDFLAGS}
@@ -20,10 +20,10 @@ Index: iptables-1.8.6/iptables/Makefile.am
 +ip6tables_legacy_batch_LDFLAGS = ${xtables_legacy_multi_LDFLAGS}
 +ip6tables_legacy_batch_LDADD   = ${xtables_legacy_multi_LDADD}
 +sbin_PROGRAMS += iptables-legacy-batch ip6tables-legacy-batch
-Index: iptables-1.8.6/iptables/iptables-batch.c
+Index: iptables-1.8.9/iptables/iptables-batch.c
 ===================================================================
 --- /dev/null
-+++ iptables-1.8.6/iptables/iptables-batch.c
++++ iptables-1.8.9/iptables/iptables-batch.c
 @@ -0,0 +1,468 @@
 +/*
 + * Author: Ludwig Nussel <ludwig.nussel@suse.de>

iptables.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Thu Jan 12 22:58:50 UTC 2023 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.8.9
+  * arptables-nft: Support --exact flag
+  * Support more chunk types in the "sctp" extension
+  * Print `--` in ip6tables' "opt" column for consistency with
+    iptables
+  * More verbose error messages if iptables-nft-restore fails
+  * Support `-p Length` with ebtables-nft,
+    needed for 802_3 extension.
+
 -------------------------------------------------------------------
 Thu Jul 21 12:43:02 UTC 2022 - Ludwig Nussel <lnussel@suse.com>
 

iptables.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -23,15 +23,15 @@
 %endif
 
 Name:           iptables
-Version:        1.8.8
+Version:        1.8.9
 Release:        0
 Summary:        IP packet filter administration utilities
 License:        Artistic-2.0 AND GPL-2.0-only
 Group:          Productivity/Networking/Security
 URL:            https://netfilter.org/projects/iptables/
 #Git-Clone:     git://git.netfilter.org/iptables
-Source:         https://netfilter.org/projects/iptables/files/%name-%version.tar.bz2
-Source2:        https://netfilter.org/projects/iptables/files/%name-%version.tar.bz2.sig
+Source:         https://netfilter.org/projects/iptables/files/%name-%version.tar.xz
+Source2:        https://netfilter.org/projects/iptables/files/%name-%version.tar.xz.sig
 Source3:        %name.keyring
 Source4:        baselibs.conf
 Patch1:         iptables-batch.patch
@@ -194,6 +194,7 @@ rm -f "$b/%_libdir/"libiptc.so*
 install -m0755 iptables/iptables-apply "$b/%_sbindir/"
 rm -f "$b/%_libdir"/*.la
 rm -f "$b/%_sysconfdir/ethertypes" # provided by netcfg
+rm -f "$b/%_sysconfdir/xtables.conf" # packaging bug
 
 for i in iptables iptables-restore iptables-save ip6tables ip6tables-restore \
     ip6tables-save arptables arptables-restore arptables-save ebtables \
@@ -328,6 +329,7 @@ fi
 %_sbindir/ip6tables-*translate*
 %_sbindir/arptables-nft*
 %_sbindir/ebtables-nft*
+%_sbindir/ebtables-*translate*
 %_sbindir/xtables*
 %_mandir/man1/*tables*
 %_mandir/man8/*tables*