ELBA-2025-0926

ELBA-2025-0926 - iptables bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-02-04

Description

[[1.8.10-11.el9]]
- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]

[[1.8.10-10.el9]]
- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]

[[1.8.10-9.el9]]
- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]

[[1.8.10-8.el9]]
- Revert 'xshared: Print protocol numbers if --numeric was given' (Phil Sutter) [RHEL-70173]

[[1.8.10-7.el9]]
- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]

[[1.8.10-6.el9]]
- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]

[[1.8.10-5.el9]]
- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]

[[1.8.10-4.el9]]
- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]

[[1.8.10-3.el9]]
- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]

[[1.8.10-2.el9]]
- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]

[[1.8.10-1.el9]]
- spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
- Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	iptables-1.8.10-11.el9_5.src.rpm	ad7a21acf90c9d354b68998f723a6a7d48c4c38a361cde8a9b2ed569af6c6d8d	-	ol9_aarch64_appstream
	iptables-1.8.10-11.el9_5.src.rpm	ad7a21acf90c9d354b68998f723a6a7d48c4c38a361cde8a9b2ed569af6c6d8d	-	ol9_aarch64_baseos_latest
	iptables-1.8.10-11.el9_5.src.rpm	ad7a21acf90c9d354b68998f723a6a7d48c4c38a361cde8a9b2ed569af6c6d8d	-	ol9_aarch64_u5_baseos_patch
	iptables-devel-1.8.10-11.el9_5.aarch64.rpm	6bb264062f4ddb31a4002ce4c488d6b487ccb98d336e6c6e91de7b6ea3c06247	-	ol9_aarch64_appstream
	iptables-libs-1.8.10-11.el9_5.aarch64.rpm	c1bfcf7ef836d2e5a2f7cdb6f5881f272bbb4ed0960c0a55432541522ab5f1dc	-	ol9_aarch64_baseos_latest
	iptables-libs-1.8.10-11.el9_5.aarch64.rpm	c1bfcf7ef836d2e5a2f7cdb6f5881f272bbb4ed0960c0a55432541522ab5f1dc	-	ol9_aarch64_u5_baseos_patch
	iptables-nft-1.8.10-11.el9_5.aarch64.rpm	28ead9798887a05e94cd899715f8ea18d822fe11b92fb068eab29f0ae8cdaf6e	-	ol9_aarch64_baseos_latest
	iptables-nft-1.8.10-11.el9_5.aarch64.rpm	28ead9798887a05e94cd899715f8ea18d822fe11b92fb068eab29f0ae8cdaf6e	-	ol9_aarch64_u5_baseos_patch
	iptables-nft-services-1.8.10-11.el9_5.noarch.rpm	ede9f28f25783d100e1d5b774e6ded05d7bd863222a9b82861ce9443d2eda1fa	-	ol9_aarch64_appstream
	iptables-utils-1.8.10-11.el9_5.aarch64.rpm	a3921697769c56a2ff5355eb8bd4cdcdecd7c1700ac6b789ddf7ca8c6fe4cacc	-	ol9_aarch64_baseos_latest
	iptables-utils-1.8.10-11.el9_5.aarch64.rpm	a3921697769c56a2ff5355eb8bd4cdcdecd7c1700ac6b789ddf7ca8c6fe4cacc	-	ol9_aarch64_u5_baseos_patch
Oracle Linux 9 (x86_64)	iptables-1.8.10-11.el9_5.src.rpm	ad7a21acf90c9d354b68998f723a6a7d48c4c38a361cde8a9b2ed569af6c6d8d	-	ol9_x86_64_appstream
	iptables-1.8.10-11.el9_5.src.rpm	ad7a21acf90c9d354b68998f723a6a7d48c4c38a361cde8a9b2ed569af6c6d8d	-	ol9_x86_64_baseos_latest
	iptables-1.8.10-11.el9_5.src.rpm	ad7a21acf90c9d354b68998f723a6a7d48c4c38a361cde8a9b2ed569af6c6d8d	-	ol9_x86_64_u5_baseos_patch
	iptables-devel-1.8.10-11.el9_5.i686.rpm	07b51e3c39a92462dc92eb04c1328ed1cfd0e2b0ce133c0e3bffa832241f2927	-	ol9_x86_64_appstream
	iptables-devel-1.8.10-11.el9_5.x86_64.rpm	f4a809da6b1ce66ebc8d05806fd88cba7aa023295e8e1af2a26f21222d0c5bb3	-	ol9_x86_64_appstream
	iptables-libs-1.8.10-11.el9_5.i686.rpm	8c625a8bdaea24653a890c38037e93b94b4999316646b52e77045a1290bebb85	-	ol9_x86_64_baseos_latest
	iptables-libs-1.8.10-11.el9_5.i686.rpm	8c625a8bdaea24653a890c38037e93b94b4999316646b52e77045a1290bebb85	-	ol9_x86_64_u5_baseos_patch
	iptables-libs-1.8.10-11.el9_5.x86_64.rpm	99b9068cf00f7778b367f4e9aae4466f065f98117e88557103331394614a7ecb	-	ol9_x86_64_baseos_latest
	iptables-libs-1.8.10-11.el9_5.x86_64.rpm	99b9068cf00f7778b367f4e9aae4466f065f98117e88557103331394614a7ecb	-	ol9_x86_64_u5_baseos_patch
	iptables-nft-1.8.10-11.el9_5.x86_64.rpm	249ef7503584cece13878d15743d682d86ea57aa922208601ce5d6616af03be8	-	ol9_x86_64_baseos_latest
	iptables-nft-1.8.10-11.el9_5.x86_64.rpm	249ef7503584cece13878d15743d682d86ea57aa922208601ce5d6616af03be8	-	ol9_x86_64_u5_baseos_patch
	iptables-nft-services-1.8.10-11.el9_5.noarch.rpm	ede9f28f25783d100e1d5b774e6ded05d7bd863222a9b82861ce9443d2eda1fa	-	ol9_x86_64_appstream
	iptables-utils-1.8.10-11.el9_5.x86_64.rpm	cd6960df716e70d9cdf3f8923c2dc438222efd5bb5db85d93cb6850524e44f6e	-	ol9_x86_64_baseos_latest
	iptables-utils-1.8.10-11.el9_5.x86_64.rpm	cd6960df716e70d9cdf3f8923c2dc438222efd5bb5db85d93cb6850524e44f6e	-	ol9_x86_64_u5_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team