------------------------------------------------------------------- Fri Dec 21 02:08:44 UTC 2012 - jengelh@inai.de - Always ship all source tarballs to make osc validator happy - Enable version 2.0 for openSUSE:Factory which now has kernel 3.7 ------------------------------------------------------------------- Mon Dec 3 15:17:18 CET 2012 - sbrabec@suse.cz - Verify GPG signature. ------------------------------------------------------------------- Mon Nov 12 21:01:14 UTC 2012 - jengelh@inai.de - Update to new upstream release 2.0 (enabled for Kernel:HEAD only at this time) * Support for Linux 3.7 ------------------------------------------------------------------- Mon Oct 15 18:08:54 UTC 2012 - jengelh@inai.de - Update to new upstream release 1.47.1 * Support for IPv6 in xt_psd ------------------------------------------------------------------- Thu Aug 23 13:53:48 UTC 2012 - jengelh@inai.de - Update to new upstream release 1.46 * length2, SYSRQ, RAWNAT: preinitialize values for ipv6_find_hdr * TARPIT: fix memory leak when tarpit_generic() fails * Support for Linux 3.6 ------------------------------------------------------------------- Sun Jul 15 12:00:03 UTC 2012 - jengelh@inai.de - Update to new upstream release 1.45 * SYSRQ: fix double target initialization at module load * TARPIT: IPv6 support ------------------------------------------------------------------- Sat Jun 30 17:45:42 UTC 2012 - jengelh@inai.de - Update to new upstream release 1.43 * xt_psd: avoid crash due to curr->next corruption * xt_psd: reject invalid match options * DNETMAP: new type: static binding * DNETMAP: new persistent flag option for prefix * DNETMAP: add write support to procfs interface ------------------------------------------------------------------- Thu Apr 5 03:04:48 UTC 2012 - jengelh@medozas.de - update to new upstream release 1.42 * Linux 3.3/3.4 support ------------------------------------------------------------------- Mon Feb 13 10:58:00 UTC 2012 - coolo@suse.com - patch license to follow spdx.org standard ------------------------------------------------------------------- Wed Jan 4 20:37:45 UTC 2012 - jengelh@medozas.de - update to new upstream release 1.41 * support for Linux 3.2 ------------------------------------------------------------------- Fri Dec 30 23:35:33 UTC 2011 - jengelh@medozas.de - We have now a few of kernel versions that ipset can be compiled against, so ipset has been separated out into a new RPM package, and ipset-genl from xtables-addons is hereby subsequently disabled. ------------------------------------------------------------------- Wed Nov 30 10:43:07 UTC 2011 - jengelh@medozas.de - update to new upstream release 1.40 * xt_ECHO: fix kernel warning about RTAX_HOPLIMIT being used * xt_ipv4options: fix an infinite loop * Provides ipset 6.10: ICMP/ICMPv6 type/code parser bug fixed; fix lookup of tcp port names ------------------------------------------------------------------- Wed Sep 21 18:01:56 UTC 2011 - jengelh@medozas.de - update to new upstream release 1.39 * update to ipset 6.9.1 * resolve compilation errors due to missing libxtables_CFLAGS ------------------------------------------------------------------- Sat Aug 20 15:03:31 UTC 2011 - jengelh@medozas.de - update to new upstream release 1.38 * Restore UDP functionality for xt_psd * UDPLITE support for xt_SYSRQ, xt_ipp2p, xt_pknock, xt_psd * Provides ipset 6.8 ------------------------------------------------------------------- Sat Jun 25 09:25:25 UTC 2011 - jengelh@medozas.de - update to new upstream release 1.37 * xt_SYSRQ: make IPv6 trigger work again * xt_SYSRQ: improve security: include host address in digest * xt_TARPIT: fix a kernel oops in --reset mode ------------------------------------------------------------------- Fri Jun 3 15:11:54 UTC 2011 - jengelh@medozas.de - update to new upstream release 1.36 * update to ipset 6.7 * xt_TARPIT has gained the "honeypot" and "reset" modes ------------------------------------------------------------------- Mon Apr 11 21:59:02 UTC 2011 - jengelh@medozas.de - Update to new upstream release 1.35 * update to ipset 6.3 * ipset-genl: handle EAGAIN return value emitted from autoloader * ipset-genl: resolve nfgenmsg remains and fix spurious protocol abort ------------------------------------------------------------------- Thu Apr 7 15:11:31 UTC 2011 - jengelh@medozas.de - Update to new upstream release 1.34 * xt_pknock: avoid crash when hash TFM could not be allocated * xt_pknock: avoid inversion of rule lookup that led to warnings * xt_DNETMAP: add missing module alias * xt_DNETMAP: support for kernels below 2.6.34 - Add kmp preamble file ------------------------------------------------------------------- Wed Feb 2 04:28:55 UTC 2011 - jengelh@medozas.de - Update to new upstream release 1.33 * IPv6 GeoIP support * New DNETMAP extension * Update to ipset 5.4-genl ------------------------------------------------------------------- Fri Nov 5 18:50:05 UTC 2010 - jengelh@medozas.de - Update to new upstream release 1.31 * LOGMARK: print remaining lifetime of ct entries * xt_iface: allow matching against incoming/outgoing interface * libxt_gradm: match packets based on status of grsecurity RBAC ------------------------------------------------------------------- Sat Oct 9 06:59:07 UTC 2010 - jengelh@medozas.de - Do not build xt_TEE, xt_CHECKSUM; they are provided in newer iptables and kernel versions already ------------------------------------------------------------------- Sun Oct 3 08:17:43 UTC 2010 - jengelh@medozas.de - new upstream release 1.30 * support for Linux 2.6.36 * update to ipset 4.4 - ipport{,ip,net}hash did not work with mixed "src" and "dst" destination parameters * do ship ip_set_ipport{ip,net}hash ------------------------------------------------------------------- Sat Jul 24 09:47:54 UTC 2010 - jengelh@medozas.de - new upstream release 1.28 * RAWNAT: IPv6 variants erroneously rejected masks /33-/128 * new target xt_CHECKSUM * xt_length2: add support for IPv6 jumbograms * xt_geoip: fix possible out-of-bounds access * import xt_geoip database scripts ------------------------------------------------------------------- Tue Jun 29 11:51:47 UTC 2010 - lnussel@suse.de - don't require kernel module package (bnc#618244) ------------------------------------------------------------------- Mon May 17 07:23:05 UTC 2010 - jengelh@medozas.de - new upstream release 1.27 * support for upcoming Linux 2.6.35 ------------------------------------------------------------------- Sat May 1 09:15:48 UTC 2010 - jengelh@medozas.de - new upstream release 1.26 * fix compile error with kernel 2.6.34 ------------------------------------------------------------------- Mon Apr 26 12:15:08 UTC 2010 - jengelh@medozas.de - new upstream release 1.25 * incorporated changes from upstream review into xt_TEE: (rechecksumming in PREROUTING, decrease TTL on cloned packet, set dont-fragment on cloned packets, free skb when route lookup failed, do not limit use to mangle table, do not retain iif and mark on cloned packet, new loop detection logic, use less expensive pskb_copy) ------------------------------------------------------------------- Wed Mar 17 22:09:45 UTC 2010 - jengelh@medozas.de - new upstream release 1.24 * ipp2p: updated bittorent command recognition ------------------------------------------------------------------- Thu Feb 25 00:07:24 UTC 2010 - jengelh@medozas.de - new upstream release 1.23 * ipset updated to 4.2 * removal of obsoleted configure options; compile fixes for IPV6=n and 2.6.32's skb_dst * support for Linux 2.6.33 and the projected 2.6.34 net tree ------------------------------------------------------------------- Fri Feb 12 00:46:09 CET 2010 - ro@suse.de - add KMP to specfile (to give description to kmp subpacks) ------------------------------------------------------------------- Sat Jan 23 02:32:52 CET 2010 - jengelh@medozas.de - new upstream release 1.22 * ipset: enable build of ip_set_setlist.ko * quota2: add the --no-change mode - remove merged patch geoip-dir.diff (use /usr/share/xt_geoip instead of /var/geoip) ------------------------------------------------------------------- Thu Dec 31 01:50:38 CET 2009 - jengelh@medozas.de - initial OBS package ------------------------------------------------------------------- Wed Dec 09 2009 - jengelh@medozas.de - new upstream release: 1.21 * fix clashing setsockopt numbers between xt_ACCOUNT and arptables ------------------------------------------------------------------- Thu Nov 19 2009 - jengelh@medozas.de - new upstream release: 1.20 ------------------------------------------------------------------- Mon Oct 12 2009 - jengelh@medozas.de - new upstream release: 1.19