From 60f05617fafeb68965983ae2ccd1dff2aa0317a36bd4a61872adf9d9b23fc92b Mon Sep 17 00:00:00 2001
From: Jan Engelhardt <jengelh@inai.de>
Date: Fri, 15 Jan 2021 22:35:27 +0000
Subject: [PATCH] - Update to release 1.8.7

OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iptables?expand=0&rev=142
---
 iptables-1.8.6.tar.bz2     |   3 ---
 iptables-1.8.6.tar.bz2.sig | Bin 566 -> 0 bytes
 iptables-1.8.7.tar.bz2     |   3 +++
 iptables-1.8.7.tar.bz2.sig | Bin 0 -> 566 bytes
 iptables.changes           |  13 +++++++++++++
 iptables.spec              |   4 ++--
 6 files changed, 18 insertions(+), 5 deletions(-)
 delete mode 100644 iptables-1.8.6.tar.bz2
 delete mode 100644 iptables-1.8.6.tar.bz2.sig
 create mode 100644 iptables-1.8.7.tar.bz2
 create mode 100644 iptables-1.8.7.tar.bz2.sig

diff --git a/iptables-1.8.6.tar.bz2 b/iptables-1.8.6.tar.bz2
deleted file mode 100644
index 1e88085..0000000
--- a/iptables-1.8.6.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a0f4fe0c3eb8faa5bd9c8376d132f340b9558e750c91deb2d5028aa3d0047767
-size 715744
diff --git a/iptables-1.8.6.tar.bz2.sig b/iptables-1.8.6.tar.bz2.sig
deleted file mode 100644
index e9f0023b71654ae99cb04cf3b134f66f8e16b759d7c12f6d5d3e7c3a1b5ed5a0..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 566
zcmV-60?GY}0y6{v0SW*e79j*T*<`H1NrA^z0Q;NOU6+cA6d>dU0$-h=Q~(MI5Y=6m
zii#8<<X&|T{w&mUTLX@o*FuauwT&3CXmI|>)N~O~$iO?dCTcOM)+*moKH+}d;oY$#
z*3y?QyVzBbBv64=d^a~W5OZ?pid#3qb)8KfSB{Z?%vGcd5_;iql_!*+RYFrvj+^N|
zjQ}dht$+c<Y(gHdvxFm84m#ra*!Yc)uw^ST+hD!0fbPk3R$?z$KO7(>d)wwN$p2!D
zN?j&F376!HN%Xl*r-${UuuD1nVz?z-N>kcGb76s2Zp)s0=X`<|cd4{B$ESS9&1;&F
zK_Vip%SNp$HZR6{_s--`#<22`HEcs_LaZxj6p@d2_;H=gt8}KJkuaBdtfelOmcA`{
zF+M>j@5~xt6_wY=Z3&sBDNfyPD{_+cOfr=%#Fhd~6;WIZgKT6ZTEc(S!_b{bNfZA$
z-|Y)HbmkUq@3vuBN>YQ`>$C7~YeXVoKyl=5uG{}tCQAbR>du$@0&s#K{_qEGoi=cn
z+lTmk6=<JJ3C%pbw&>({DZ=QWtfliwaG>o&r60KKvbP`B!_xyBzd8}y@zuQ#^f`Z{
zji7fzjb4%12$2U(Rq_CrV@q<hY0B7P@eM-Z_<Ste+)#>_Kb{b|QTL~Fl0(gJ2P5tZ
znP(k5LB?$P`fu~#JXrtCrIM{<$6uD5v$a;Vy*AxHV{M)rXUBztKbo#`k{<0Uf;pe1
E<Yl-Og#Z8m

diff --git a/iptables-1.8.7.tar.bz2 b/iptables-1.8.7.tar.bz2
new file mode 100644
index 0000000..1c24da2
--- /dev/null
+++ b/iptables-1.8.7.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c109c96bb04998cd44156622d36f8e04b140701ec60531a10668cfdff5e8d8f0
+size 717862
diff --git a/iptables-1.8.7.tar.bz2.sig b/iptables-1.8.7.tar.bz2.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..e2ba9695e335cc3ee09374c0eeb580b76cfcd16c9f6a04ee3c5c7903ed089567
GIT binary patch
literal 566
zcmV-60?GY}0y6{v0SW*e79j*T*<`H1NrA^z0Q;NOU6+cA6d>dU0$>6X<Nyi@5Y=6m
zii#8<<P>QS|4dvMo1UhGdXU~^%pl3S>CVJ5M$z<S(L*4D7fmgmno|-MEk0q^dOxS)
zJ2OHM3lG|H$kjDqp09bbOd~Jyirw?A4TqB904~{4vR!qoG$>NspMeuLuX~*f_7Upr
z$MK!o%fw`{LgdJ-a-pvROx*7KmCK4ma*?Q;*=+mQ_h#-&gU&+b2NXY3aOWcvHweS%
ztDSA|sTQ~D?-AX>lqO06xd)sUfN$b2$;tkTLOsXYC5+<Lt9D7j2<yy0YJj`%!$q4t
z2&{E!IUGr`f$f_ZCs8JCvBu!?S+UWWiqPiG1DM}=wZ)kvGH_QVig=q=fy|=SRbX<4
zbKMJqMj*@#?X&IS^J@TnJ81q`rkln>E)Ew!a`a`YUJCOY8Go#l$@j|3WH^XeLv}u|
zS23DWw<?*_m@_^P?!N=U)u;Y!_^-2;LrX<AV*a4v3rFre&U8&KIF%{n@Ngn7As0jy
z!7TT;DIQrWp)Py5mb%dvFxlwzo6&RbsadF-x^4Dtf^;cLFBNfl^!g4VwDJYp)ALE&
z(qOjGnXLfXp&Jl8j0T+DhAZ%F2YIvJQubdRAonlz>{QeI-cp@|zfa`)cg^PObjzel
z=~5#YFOh9M5SJZ+el`cq+g>nSB~NzJx2)6<3C895-nTYK$YuR?Hy`=2EH;3#WqutZ
E46VW#3jhEB

literal 0
HcmV?d00001

diff --git a/iptables.changes b/iptables.changes
index 08c9c77..2a6e4c4 100644
--- a/iptables.changes
+++ b/iptables.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Fri Jan 15 22:34:25 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.8.7
+  * iptables-nft:
+  * Improved performance when matching on IP/MAC address prefixes
+    if the prefix is byte-aligned. In ideal cases, this doubles
+    packet processing performance.
+  * Dump user-defined chains in lexical order. This way ruleset
+    dumps become stable and easily comparable.
+  * Avoid pointless table/chain creation. For instance,
+    `iptables-nft -L` no longer creates missing base-chains.
+
 -------------------------------------------------------------------
 Sun Nov  1 12:31:34 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/iptables.spec b/iptables.spec
index 396a63e..d250b5a 100644
--- a/iptables.spec
+++ b/iptables.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           iptables
-Version:        1.8.6
+Version:        1.8.7
 Release:        0
 Summary:        IP packet filter administration utilities
 License:        GPL-2.0-only AND Artistic-2.0