Accepting request 958126 from security:netfilter

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/958126
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nftables?expand=0&rev=26

0001-build-add-missing-AM_CPPFLAGS-to-examples.patch

@@ -0,0 +1,28 @@
+From 6b46cd26f9503ae50e9741747092a72d2fc35ec3 Mon Sep 17 00:00:00 2001
+From: Jan Engelhardt <jengelh@inai.de>
+Date: Tue, 22 Feb 2022 05:44:57 +0100
+Subject: [PATCH] build: add missing AM_CPPFLAGS to examples/
+
+examples$ make V=1
+depbase=`echo nft-buffer.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
+gcc -DHAVE_CONFIG_H -I. -I..     -g -O2 -MT nft-buffer.o -MD -MP -MF $depbase.Tpo -c -o nft-buffer.o nft-buffer.c &&\
+mv -f $depbase.Tpo $depbase.Po
+nft-buffer.c:3:10: fatal error: nftables/libnftables.h: No such file or directory
+
+Signed-off-by: Jan Engelhardt <jengelh@inai.de>
+---
+ examples/Makefile.am | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/examples/Makefile.am b/examples/Makefile.am
+index c972170d..d7234ce4 100644
+--- a/examples/Makefile.am
++++ b/examples/Makefile.am
+@@ -1,3 +1,4 @@
++AM_CPPFLAGS = -I$(top_srcdir)/include
+ noinst_PROGRAMS	= nft-buffer		\
+ 		  nft-json-file
+ 
+-- 
+2.35.1
+

nftables-1.0.0.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:58bf547daf967a2b88ecb4f425f126006ebde22711db806b25c1d6cf84fe45f4
-size 921053

nftables-1.0.2.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0b28a36ffcf4567b841de7bd3f37918b1fed27859eb48bdec51e1f7a83954c02
+size 970781

nftables.changes

@@ -1,3 +1,29 @@
+-------------------------------------------------------------------
+Tue Feb 22 04:39:01 UTC 2022 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.0.2
+  * New ruleset optimization -o/--optimize option.
+  * Support for IP and TCP options and SCTP chunks in sets.
+  * Support for tcp fastopen, md5sig and mptcp options.
+  * MP-TCP subtype matching support.
+  * JSON support for flowtables.
+- Add 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch
+
+-------------------------------------------------------------------
+Thu Nov 18 22:15:03 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.0.1
+  * Reduce memory footprint when loading large sets/maps.
+  * Speed up reload of large sets/maps.
+  * Speed up listing of specific tables in large ruleset, e.g.
+    large ruleset with ~100k lines.
+  * Speed up --terse option when listing a ruleset large sets/maps.
+  * Print raw payload expression in hexadecimal, e.g.
+    "@ll,0,8 & 0x80 == 0x80"
+  * egress hook support (available since 5.16-rc1).
+  * Allow matching and update bytes at inner header/payload
+    offset (available since 5.16-rc1).
+
 -------------------------------------------------------------------
 Thu Aug 19 18:06:29 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
 

nftables.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package nftables
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           nftables
-Version:        1.0.0
+Version:        1.0.2
 Release:        0
 Summary:        Userspace utility to access the nf_tables packet filter
 License:        GPL-2.0-only
@@ -25,19 +25,21 @@ Group:          Productivity/Networking/Security
 URL:            https://netfilter.org/projects/nftables/
 
 #Git-Clone:	git://git.netfilter.org/nftables
-Source:         http://ftp.netfilter.org/pub/nftables/nftables-%version.tar.bz2
+Source:         http://ftp.netfilter.org/pub/%name/%name-%version.tar.bz2
-Source2:        http://ftp.netfilter.org/pub/nftables/nftables-%version.tar.bz2.sig
+Source2:        http://ftp.netfilter.org/pub/%name/%name-%version.tar.bz2.sig
 Source3:        %name.keyring
+Patch1:         0001-build-add-missing-AM_CPPFLAGS-to-examples.patch
 BuildRequires:  asciidoc
 BuildRequires:  bison
 BuildRequires:  flex
 BuildRequires:  gmp-devel
+BuildRequires:  libtool
 BuildRequires:  pkg-config >= 0.21
 BuildRequires:  python3-base
-BuildRequires:  readline-devel
 BuildRequires:  pkgconfig(jansson)
+BuildRequires:  pkgconfig(libedit)
 BuildRequires:  pkgconfig(libmnl) >= 1.0.4
-BuildRequires:  pkgconfig(libnftnl) >= 1.2.0
+BuildRequires:  pkgconfig(libnftnl) >= 1.2.1
 BuildRequires:  pkgconfig(xtables) >= 1.6.1
 
 %description
@@ -81,6 +83,7 @@ A Python module for nftables.
 %autosetup -p1
 
 %build
+autoreconf -fi
 mkdir bin
 ln -s "%_bindir/docbook-to-man" bin/docbook2x-man
 export PATH="$PATH:$PWD/bin"