Accepting request 1033086 from home:polslinux:branches:security:netfilter

- Update to 1.2.1:
  * fix(modules): don't error if /proc/modules is missing (a1f091d)
  * fix(readme): format optional <ver> (03e61f2)
  * docs: add protocols to rich and zones (191cea4)
  * docs(policy): add priority attribute to rule (616ed7c)
  * fix(runtimeToPermanent): errors for interfaces not in zone (6b5a70b)
  * fix(failsafe): log exception on fatal failure (af1b8f0)
  * fix(ipset): defer native ipset creation if nftables (ae0ded4)
  * fix(nftables): drop invalid packets before zone dispatch (dc972ae)
  * fix(iptables): drop invalid packets before zone dispatch (83a4608)
  * fix(policies): Splitting interfaces with wildcards (3806e79)
  * fix(ipset): exception on overlap checking empty set (bfe827f)
  * fix(bash): fix ipset commands autocompletion (742669b)
  * docs(README): fix typo (e40b100)
  * fix(treewide): misc typos (d121f0c)
  * fix: firewalld.conf: trim trailing whitespace (21809ed)

OBS-URL: https://build.opensuse.org/request/show/1033086
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=133

0002-Disable-FlushAllOnReload-option.patch

@@ -14,11 +14,11 @@ Signed-off-by: Michal Rostecki <mrostecki@opensuse.org>
  src/firewall/config/__init__.py.in | 2 +-
  3 files changed, 4 insertions(+), 4 deletions(-)
 
-diff --git a/config/firewalld.conf b/config/firewalld.conf
+Index: firewalld-1.2.1/config/firewalld.conf
-index 532f0452..e789f2a7 100644
+===================================================================
---- a/config/firewalld.conf
+--- firewalld-1.2.1.orig/config/firewalld.conf
-+++ b/config/firewalld.conf
++++ firewalld-1.2.1/config/firewalld.conf
-@@ -52,8 +52,8 @@ FirewallBackend=nftables
+@@ -63,8 +63,8 @@ FirewallBackend=nftables
  # configuration was retained during a reload, namely; interface to zone
  # assignment, and direct rules. This was confusing to users. To get the old
  # behavior set this to "no".
@@ -29,11 +29,11 @@ index 532f0452..e789f2a7 100644
  
  # RFC3964_IPv4
  # As per RFC 3964, filter IPv6 traffic with 6to4 destination addresses that
-diff --git a/doc/xml/firewalld.conf.xml b/doc/xml/firewalld.conf.xml
+Index: firewalld-1.2.1/doc/xml/firewalld.conf.xml
-index fcfbfd2b..8415ba3e 100644
+===================================================================
---- a/doc/xml/firewalld.conf.xml
+--- firewalld-1.2.1.orig/doc/xml/firewalld.conf.xml
-+++ b/doc/xml/firewalld.conf.xml
++++ firewalld-1.2.1/doc/xml/firewalld.conf.xml
-@@ -166,7 +166,7 @@
+@@ -190,7 +190,7 @@
                  runtime configuration was retained during a reload, namely;
                  interface to zone assignment, and direct rules. This was
                  confusing to users. To get the old behavior set this to "no".
@@ -42,11 +42,11 @@ index fcfbfd2b..8415ba3e 100644
                  </para>
              </listitem>
          </varlistentry>
-diff --git a/src/firewall/config/__init__.py.in b/src/firewall/config/__init__.py.in
+Index: firewalld-1.2.1/src/firewall/config/__init__.py.in
-index e875e849..df6f449b 100644
+===================================================================
---- a/src/firewall/config/__init__.py.in
+--- firewalld-1.2.1.orig/src/firewall/config/__init__.py.in
-+++ b/src/firewall/config/__init__.py.in
++++ firewalld-1.2.1/src/firewall/config/__init__.py.in
-@@ -131,6 +131,6 @@ FALLBACK_INDIVIDUAL_CALLS = False
+@@ -132,6 +132,6 @@ FALLBACK_INDIVIDUAL_CALLS = False
  FALLBACK_LOG_DENIED = "off"
  FALLBACK_AUTOMATIC_HELPERS = "no"
  FALLBACK_FIREWALL_BACKEND = "nftables"
@@ -54,6 +54,3 @@ index e875e849..df6f449b 100644
 +FALLBACK_FLUSH_ALL_ON_RELOAD = False
  FALLBACK_RFC3964_IPV4 = True
  FALLBACK_ALLOW_ZONE_DRIFTING = False
--- 
-2.30.0
-

firewalld-1.2.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:28fd90e88bda0dfd460f370f353474811b2e295d7eb27f0d7d18ffa3d786eeb7
-size 2120379

firewalld-1.2.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5370f92ae98e69a6e0410ce71c05af85992c57db92dd7a21e05d39a1c86997f6
+size 2142992

firewalld.changes

@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Thu Nov  3 15:03:25 UTC 2022 - Paolo Stivanin <info@paolostivanin.com>
+
+- Update to 1.2.1:
+  * fix(modules): don't error if /proc/modules is missing (a1f091d)
+  * fix(readme): format optional <ver> (03e61f2)
+  * docs: add protocols to rich and zones (191cea4)
+  * docs(policy): add priority attribute to rule (616ed7c)
+  * fix(runtimeToPermanent): errors for interfaces not in zone (6b5a70b)
+  * fix(failsafe): log exception on fatal failure (af1b8f0)
+  * fix(ipset): defer native ipset creation if nftables (ae0ded4)
+  * fix(nftables): drop invalid packets before zone dispatch (dc972ae)
+  * fix(iptables): drop invalid packets before zone dispatch (83a4608)
+  * fix(policies): Splitting interfaces with wildcards (3806e79)
+  * fix(ipset): exception on overlap checking empty set (bfe827f)
+  * fix(bash): fix ipset commands autocompletion (742669b)
+  * docs(README): fix typo (e40b100)
+  * fix(treewide): misc typos (d121f0c)
+  * fix: firewalld.conf: trim trailing whitespace (21809ed)
+
 -------------------------------------------------------------------
 Thu Sep  1 07:55:30 UTC 2022 - Stefan Schubert <schubi@suse.com>
 

firewalld.spec

@@ -27,7 +27,7 @@
 %global modprobe_d_files firewalld-sysctls.conf
 
 Name:           firewalld
-Version:        1.2.0
+Version:        1.2.1
 Release:        0
 Summary:        A firewall daemon with D-Bus interface providing a dynamic firewall
 License:        GPL-2.0-or-later