From 78b4672572651469b612a2dea7effbb06db4727a926880ad5b766ee4d11fc317 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 31 May 2022 13:35:30 +0000 Subject: [PATCH 1/3] - Update to release 1.0.3 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/nftables?expand=0&rev=66 --- nftables-1.0.2.tar.bz2 | 3 --- nftables-1.0.2.tar.bz2.sig | Bin 566 -> 0 bytes nftables-1.0.3.tar.bz2 | 3 +++ nftables-1.0.3.tar.bz2.sig | Bin 0 -> 566 bytes nftables.changes | 12 ++++++++++++ nftables.spec | 2 +- 6 files changed, 16 insertions(+), 4 deletions(-) delete mode 100644 nftables-1.0.2.tar.bz2 delete mode 100644 nftables-1.0.2.tar.bz2.sig create mode 100644 nftables-1.0.3.tar.bz2 create mode 100644 nftables-1.0.3.tar.bz2.sig diff --git a/nftables-1.0.2.tar.bz2 b/nftables-1.0.2.tar.bz2 deleted file mode 100644 index 32a0fa9..0000000 --- a/nftables-1.0.2.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:0b28a36ffcf4567b841de7bd3f37918b1fed27859eb48bdec51e1f7a83954c02 -size 970781 diff --git a/nftables-1.0.2.tar.bz2.sig b/nftables-1.0.2.tar.bz2.sig deleted file mode 100644 index 8c5b6529748b340645783e1be991dc9cfa0b84230bbde99d26803ed13d5c905c..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 566 zcmV-60?GY}0y6{v0SW*e79j*T*<`H1NrA^z0Q;NOU6+cA6d>dU0%8-8sQ?NI5Y=6m zii#8<b~Un!okG7<-pkY|WMw ztI4Ts5S-IEQu{L16>Y%gL(bMC>kw}f~I+;3hrqO@9R zSCgb&9#-l>N^969dU;5QZ2)qXThH2LhtW6r%8(M*XbZnr1cRxoXh;Y6TH*0*UR}aa zrS6hLovCG^I`L0b-!VaE^yO{BTcIfqR%Fv`*{cX=_o}&0C@nae?&P1jb(psWdAQ)+ z)V~;c_Ae{N7)bbOutM+5QAs!~(*>C2_k16$z{5kn05DJXdJpB5QUoUIz^uM!{5h&i zMfedoZMXDk=2`ZEvtX&`4icis`NQr^%K_nv_lOER15+WI4vp_8FO}=JOdVL>b8H#c z8N^e>AsiWTKo=ox1L(?WNmHX36EU+~l9$2)u)5WnSsY^2i%k{Cq%CytfyO@N;dU0%DcYApi;q5Y=6m zii#8<t^;x3FSi)PodWeJ*n1~fvG@v47C{slN8A=1R4%BDG_J5dK=w!Uq zubULHNlCatFZ{IH%q_FMPyjze;-i@17AeWtdq=C600r;|JeXOBiC%7=lZfg6f%^o% z$dY0ZuI)IRwt7hwuPq*^R!-0DCWmVXjgxF^Cxk8(`yxC7rk9F@(R(>ZY%v8U?n8VQ zdOF;|k&-L0px8o&>3re2)-W)U1n&17Vj@*67 zVY$FiY1BoQO&CV);?v~qL386gS3=N~0#IUJSW)QLTvqJJjn=;!dsAu}js3)f2X20+ z+_HkjjgLjx{iH`PBv=Akp+6z@LG*fAlGNQFM$>v8*n($qavEL*YQI_vNo}sdB}E#r zo~9SZ@y`_qbTAewKEpFe7@IFfm40U5L3W94^^6rwQVvgV9Fo%bT@ zzCLR{`2gl~3`P>P`p=PR4*s + +- Update to release 1.0.3 + * Support for wildcard interface name matching with sets + * Support for runtime auto-merge of set elements. + * Enhancements for the ruleset optimization -o/--optimize + option which allows to coalesce several NAT rules into map. + * Support for raw expressions in concatenations. + * Support for integer type protocol header fields in concatenations. + * Allow to reset TCP options (requires Linux kernel >= 5.18) + ------------------------------------------------------------------- Tue Feb 22 04:39:01 UTC 2022 - Jan Engelhardt diff --git a/nftables.spec b/nftables.spec index 1478b43..7a28814 100644 --- a/nftables.spec +++ b/nftables.spec @@ -17,7 +17,7 @@ Name: nftables -Version: 1.0.2 +Version: 1.0.3 Release: 0 Summary: Userspace utility to access the nf_tables packet filter License: GPL-2.0-only From dda4e0611e45e5fa02be3753cd497447d67156b77acbadd856b985e6723598d3 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 31 May 2022 14:44:27 +0000 Subject: [PATCH 2/3] - Drop 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch OBS-URL: https://build.opensuse.org/package/show/security:netfilter/nftables?expand=0&rev=67 --- ...-add-missing-AM_CPPFLAGS-to-examples.patch | 28 ------------------- nftables.changes | 1 + nftables.spec | 1 - 3 files changed, 1 insertion(+), 29 deletions(-) delete mode 100644 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch diff --git a/0001-build-add-missing-AM_CPPFLAGS-to-examples.patch b/0001-build-add-missing-AM_CPPFLAGS-to-examples.patch deleted file mode 100644 index 5319ec2..0000000 --- a/0001-build-add-missing-AM_CPPFLAGS-to-examples.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 6b46cd26f9503ae50e9741747092a72d2fc35ec3 Mon Sep 17 00:00:00 2001 -From: Jan Engelhardt -Date: Tue, 22 Feb 2022 05:44:57 +0100 -Subject: [PATCH] build: add missing AM_CPPFLAGS to examples/ - -examples$ make V=1 -depbase=`echo nft-buffer.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ -gcc -DHAVE_CONFIG_H -I. -I.. -g -O2 -MT nft-buffer.o -MD -MP -MF $depbase.Tpo -c -o nft-buffer.o nft-buffer.c &&\ -mv -f $depbase.Tpo $depbase.Po -nft-buffer.c:3:10: fatal error: nftables/libnftables.h: No such file or directory - -Signed-off-by: Jan Engelhardt ---- - examples/Makefile.am | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/examples/Makefile.am b/examples/Makefile.am -index c972170d..d7234ce4 100644 ---- a/examples/Makefile.am -+++ b/examples/Makefile.am -@@ -1,3 +1,4 @@ -+AM_CPPFLAGS = -I$(top_srcdir)/include - noinst_PROGRAMS = nft-buffer \ - nft-json-file - --- -2.35.1 - diff --git a/nftables.changes b/nftables.changes index 10070de..f0771e0 100644 --- a/nftables.changes +++ b/nftables.changes @@ -9,6 +9,7 @@ Tue May 31 13:34:12 UTC 2022 - Jan Engelhardt * Support for raw expressions in concatenations. * Support for integer type protocol header fields in concatenations. * Allow to reset TCP options (requires Linux kernel >= 5.18) +- Drop 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch ------------------------------------------------------------------- Tue Feb 22 04:39:01 UTC 2022 - Jan Engelhardt diff --git a/nftables.spec b/nftables.spec index 7a28814..5c0b967 100644 --- a/nftables.spec +++ b/nftables.spec @@ -28,7 +28,6 @@ URL: https://netfilter.org/projects/nftables/ Source: http://ftp.netfilter.org/pub/%name/%name-%version.tar.bz2 Source2: http://ftp.netfilter.org/pub/%name/%name-%version.tar.bz2.sig Source3: %name.keyring -Patch1: 0001-build-add-missing-AM_CPPFLAGS-to-examples.patch BuildRequires: asciidoc BuildRequires: bison BuildRequires: flex From 7815df55d232e9e70ad011bdf260a2c71ece6f78f4bf492aad814933fcd61e45 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 7 Jun 2022 14:57:22 +0000 Subject: [PATCH 3/3] - Update to release 1.0.4 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/nftables?expand=0&rev=68 --- nftables-1.0.3.tar.bz2 | 3 --- nftables-1.0.3.tar.bz2.sig | Bin 566 -> 0 bytes nftables-1.0.4.tar.bz2 | 3 +++ nftables-1.0.4.tar.bz2.sig | Bin 0 -> 566 bytes nftables.changes | 7 +++++++ nftables.spec | 4 ++-- 6 files changed, 12 insertions(+), 5 deletions(-) delete mode 100644 nftables-1.0.3.tar.bz2 delete mode 100644 nftables-1.0.3.tar.bz2.sig create mode 100644 nftables-1.0.4.tar.bz2 create mode 100644 nftables-1.0.4.tar.bz2.sig diff --git a/nftables-1.0.3.tar.bz2 b/nftables-1.0.3.tar.bz2 deleted file mode 100644 index c1d81f5..0000000 --- a/nftables-1.0.3.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:47c4eba0105ebd3ffa89553e0702ccb34d8906a91f72ced58ab0d992b29c7748 -size 978270 diff --git a/nftables-1.0.3.tar.bz2.sig b/nftables-1.0.3.tar.bz2.sig deleted file mode 100644 index 9374d6a73da38b3e4d8311b28f1fdf788022483d8e2b609f3edd020a4c4f40a3..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 566 zcmV-60?GY}0y6{v0SW*e79j*T*<`H1NrA^z0Q;NOU6+cA6d>dU0%DcYApi;q5Y=6m zii#8<t^;x3FSi)PodWeJ*n1~fvG@v47C{slN8A=1R4%BDG_J5dK=w!Uq zubULHNlCatFZ{IH%q_FMPyjze;-i@17AeWtdq=C600r;|JeXOBiC%7=lZfg6f%^o% z$dY0ZuI)IRwt7hwuPq*^R!-0DCWmVXjgxF^Cxk8(`yxC7rk9F@(R(>ZY%v8U?n8VQ zdOF;|k&-L0px8o&>3re2)-W)U1n&17Vj@*67 zVY$FiY1BoQO&CV);?v~qL386gS3=N~0#IUJSW)QLTvqJJjn=;!dsAu}js3)f2X20+ z+_HkjjgLjx{iH`PBv=Akp+6z@LG*fAlGNQFM$>v8*n($qavEL*YQI_vNo}sdB}E#r zo~9SZ@y`_qbTAewKEpFe7@IFfm40U5L3W94^^6rwQVvgV9Fo%bT@ zzCLR{`2gl~3`P>P`p=PR4*sdU0%D(C_5cbA5Y=6m zii#8<`9gnCgixjHFkNyHWMc*UJjy?1EM#0KgJvO;rU?-4j7^J`+tkZ`G2fJyLreY9gv)w zs0#m+SV7Q6%$&gu)zubbw5BPJ*%ijmRjdG$KGys10PEYuSe@Ari76op!QMcM%#F72 z2no<1xDMc%XYm2au4}YSI@O6i>vTI%#ytEyDYDN8@;v(&N^Z7HsgfG=3-VU0S>$O~ z#N$2>m)zlLWSyxEW3A22NYG+!kxU?^_wu>D@`sd5f+-u>7%Yu_MZOdJ#(rMNxZv{O zgxVFpBLQSisoBS&e)q0$f^(a0fu*PssiD~>F7w6kxuvx{u&o8sAEXwh6uEzM1)d2a z!hYI|u8+AAk+s5-cgsoKT|ONr9#V@pm$zpGImRoLol1$u^@fTOBG&=feF1;sZ|^7~ zb-<;#^CcC7Gc%T040XE$AkrVHT`LO$?f#3*b>J_7d?HXcHe^IyIJ+7re!PyEp+eq2YQ-e;Yt&S6Ao`0veu5eUw#;l-U8?dVDhSN;k6 zfvmJepPGLa@z2;8XvZXi~zn8YT?Hg`%f5RSuYHq)$ literal 0 HcmV?d00001 diff --git a/nftables.changes b/nftables.changes index f0771e0..4e3abc1 100644 --- a/nftables.changes +++ b/nftables.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Tue Jun 7 14:55:21 UTC 2022 - Jan Engelhardt + +- Update to release 1.0.4 + * Fixed a segfault in -o/--optimize with unsupported statements. + * Bogus datatype mismatch error report in sets was fixed. + ------------------------------------------------------------------- Tue May 31 13:34:12 UTC 2022 - Jan Engelhardt diff --git a/nftables.spec b/nftables.spec index 5c0b967..d421c77 100644 --- a/nftables.spec +++ b/nftables.spec @@ -17,7 +17,7 @@ Name: nftables -Version: 1.0.3 +Version: 1.0.4 Release: 0 Summary: Userspace utility to access the nf_tables packet filter License: GPL-2.0-only @@ -38,7 +38,7 @@ BuildRequires: python3-base BuildRequires: pkgconfig(jansson) BuildRequires: pkgconfig(libedit) BuildRequires: pkgconfig(libmnl) >= 1.0.4 -BuildRequires: pkgconfig(libnftnl) >= 1.2.1 +BuildRequires: pkgconfig(libnftnl) >= 1.2.2 BuildRequires: pkgconfig(xtables) >= 1.6.1 %description