Accepting request 1274083 from security:netfilter

- Provide ebtables for SLES16

OBS-URL: https://build.opensuse.org/request/show/1274083
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/iptables?expand=0&rev=87

_scmsync.obsinfo

@@ -0,0 +1,4 @@
+mtime: 1746233205
+commit: 79d271cfa81d82914652e93b9056b0eff9b8b3cd95e8cbaaa1721eeed76badbb
+url: https://src.opensuse.org/jengelh/iptables
+revision: master

build.specials.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:086e42b502e8c9cb0f95ceb91bce9df379f1f019aeac6e6b5e56b76d34d734fb
+size 256

iptables.changes

@@ -1,7 +1,7 @@
 -------------------------------------------------------------------
 Mon Apr 28 19:46:06 UTC 2025 - Antonio Teixeira <antonio.teixeira@suse.com>
 
-- Provide ebtables for SLES16 
+- Provide ebtables for SLES16
 
 -------------------------------------------------------------------
 Thu Apr 17 18:48:56 UTC 2025 - Antonio Teixeira <antonio.teixeira@suse.com>
@@ -99,7 +99,7 @@ Wed Oct 20 11:15:19 UTC 2021 - Stefan Schubert <schubi@suse.de>
 - Added alts requirements for iptables-backend-nft package.
 
 -------------------------------------------------------------------
-Thu Sep 16 11:40:45 UTC 2021 - Stefan Schubert <schubi@suse.com> 
+Thu Sep 16 11:40:45 UTC 2021 - Stefan Schubert <schubi@suse.com>
 
 - Removed update-alternatives dependency in libalternatives mode.
 
@@ -137,7 +137,7 @@ Wed Jun  3 13:21:57 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
 
 - Update to release 1.8.5
   * IDLETIMER: Add alarm timer option
-  * nft: CT: add translation for NOTRACK                                                         
+  * nft: CT: add translation for NOTRACK
 - Drop iptables-apply-mktemp-fix.patch (seemingly applied)
 
 -------------------------------------------------------------------
@@ -416,7 +416,7 @@ Mon Jan  2 21:30:38 UTC 2012 - jengelh@medozas.de
 -------------------------------------------------------------------
 Wed Dec 28 09:50:23 UTC 2011 - puzel@suse.com
 
-- iptables-apply-mktemp-fix.patch (bnc#730161) 
+- iptables-apply-mktemp-fix.patch (bnc#730161)
 
 -------------------------------------------------------------------
 Wed Nov 30 14:28:11 UTC 2011 - coolo@suse.com
@@ -508,11 +508,11 @@ Fri Oct 29 17:56:48 UTC 2010 - jengelh@medozas.de
 * support for the CHECKSUM target
 * support for the ipvs match
 * a fix for deletion of rules using the quota match
-                                                                                                                                                                                                                                                                                                                                                                                                                    
+
 -------------------------------------------------------------------
 Mon Aug  9 07:21:28 UTC 2010 - puzel@novell.com
 
-- update to new upstream release 1.4.9.1 
+- update to new upstream release 1.4.9.1
   * fixes a compilation problem with static linking in the 1.4.9
     release
 
@@ -523,10 +523,10 @@ Wed Aug  4 09:56:11 UTC 2010 - puzel@novell.com
   * this is the release for the Linux 2.6.35 kernel
   * support for the LED target
   * a new version of the set extension for the upcoming release
-    supporting IPv6                                                                  
+    supporting IPv6
   * negation support for the quota match
-  * support for the SACK-IMMEDIATELY SCTP extension and 
+  * support for the SACK-IMMEDIATELY SCTP extension and
-    FORWARD_TSN chunk type in the sctp match                                   
+    FORWARD_TSN chunk type in the sctp match
   * documentation updates and various smaller bugfixes
 
 -------------------------------------------------------------------
@@ -753,7 +753,7 @@ Tue Jan  8 17:10:54 CET 2008 - prusnak@suse.cz
   * use <linux/types.h>
   * Fix make/compile error for iptables-1.4.0rc1
   * Fix for --random option in DNAT and REDIRECT
-  * Document xt_statistic 
+  * Document xt_statistic
   * sctp: fix - mistake to pass a pointer where array is required
   * Fix connlimit output for inverted --connlimit-above:
     ! > is <=, not <
@@ -906,7 +906,7 @@ Wed Mar  9 11:28:10 CET 2005 - postadal@suse.cz
 Thu Feb 17 10:02:14 CET 2005 - postadal@suse.cz
 
 - updated to version 1.3.0
-- removed obsoleted patch modules-secfix 
+- removed obsoleted patch modules-secfix
 
 -------------------------------------------------------------------
 Tue Nov 02 17:00:05 CET 2004 - postadal@suse.cz
@@ -1045,12 +1045,12 @@ Tue Oct 17 16:15:51 CEST 2000 - nadvornik@suse.cz
 -------------------------------------------------------------------
 Fri Sep 22 02:34:07 CEST 2000 - ro@suse.de
 
-- up to 1.1.1 
+- up to 1.1.1
 
 -------------------------------------------------------------------
 Fri Jun  9 08:58:25 CEST 2000 - ro@suse.de
 
-- fixed neededforbuild 
+- fixed neededforbuild
 
 -------------------------------------------------------------------
 Wed Jun  7 08:33:45 CEST 2000 - nadvornik@suse.cz

iptables.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package iptables
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -66,8 +66,8 @@ Requires(post): update-alternatives
 Requires(postun): update-alternatives
 %endif
 %else
-Provides:       %{name}-backend-nft = %version-%release
+Provides:		%name-backend-nft = %version-%release
-Obsoletes:      %{name}-backend-nft < %version-%release
+Obsoletes:		%name-backend-nft < %version-%release
 Provides:       ebtables
 %endif
 # During the update to iptables 1.8, ip6tables-restore-translate, ip6tables-translate,
@@ -80,14 +80,12 @@ Conflicts:      iptables-nft = 1.6.2
 iptables is used to set up, maintain, and inspect the rule tables of
 the various Netfilter packet filter engines inside the Linux kernel.
 
-%if %{with legacy_backend}
 %package backend-nft
 Summary:        Metapackage to make nft the default backend for iptables/arptables/ebtables
 Group:          Productivity/Networking/Security
 Requires:       iptables >= 1.8.0
 %if %{with libalternatives}
 Requires:       alts
-BuildRequires:  alts
 %else
 Requires(post): update-alternatives
 Requires(postun): update-alternatives
@@ -100,7 +98,6 @@ Installation of this package adds higher priority alternatives (cf.
 update-alternatives) that makes the iptables, ip6tables, arptables
 and ebtables commands point to a program variant that uses the
 nftables kernel interface.
-%endif
 
 %package -n xtables-plugins
 Summary:        Match and target extension plugins for iptables
@@ -215,7 +212,7 @@ for i in iptables iptables-restore iptables-save ip6tables ip6tables-restore \
     ip6tables-save arptables arptables-restore arptables-save ebtables \
     ebtables-restore ebtables-save; do
 %if %{with legacy_backend}
-	%if ! %{with libalternatives}
+	%if !%{with libalternatives}
 		ln -fsv "%_sysconfdir/alternatives/$i" "$b/%_sbindir/$i"
 	%else
 		ln -fsv %_bindir/alts "$b/%_sbindir/$i"
@@ -366,7 +363,7 @@ fi
 %_sbindir/ip6tables-legacy*
 %_sbindir/xtables-legacy-multi
 # backend-legacy (implicit)
-%if ! %{with libalternatives}
+%if !%{with libalternatives}
 %ghost %_sysconfdir/alternatives/iptables
 %ghost %_sysconfdir/alternatives/iptables-restore
 %ghost %_sysconfdir/alternatives/iptables-save
@@ -405,7 +402,7 @@ fi
 
 %if %{with legacy_backend}
 %files backend-nft
-%if ! %{with libalternatives}
+%if !%{with libalternatives}
 %ghost %_sysconfdir/alternatives/iptables
 %ghost %_sysconfdir/alternatives/iptables-restore
 %ghost %_sysconfdir/alternatives/iptables-save