ELBA-2025-0926

ELBA-2025-0926 - iptables bug fix update

Type:	BUG
Severity:	NA
Release Date:	2025-02-04

Description

[[1.8.10-11.el9]]
- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]

[[1.8.10-10.el9]]
- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]

[[1.8.10-9.el9]]
- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]

[[1.8.10-8.el9]]
- Revert 'xshared: Print protocol numbers if --numeric was given' (Phil Sutter) [RHEL-70173]

[[1.8.10-7.el9]]
- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]

[[1.8.10-6.el9]]
- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]

[[1.8.10-5.el9]]
- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]

[[1.8.10-4.el9]]
- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]

[[1.8.10-3.el9]]
- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]

[[1.8.10-2.el9]]
- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]

[[1.8.10-1.el9]]
- spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
- Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	iptables-1.8.10-11.el9_5.src.rpm	a3eabeaebeb090a191fe541d7447a2d8	-	ol9_aarch64_appstream
	iptables-1.8.10-11.el9_5.src.rpm	a3eabeaebeb090a191fe541d7447a2d8	-	ol9_aarch64_baseos_latest
	iptables-1.8.10-11.el9_5.src.rpm	a3eabeaebeb090a191fe541d7447a2d8	-	ol9_aarch64_u5_baseos_patch
	iptables-devel-1.8.10-11.el9_5.aarch64.rpm	d450df7eacb33b18a84e016d48976b8c	-	ol9_aarch64_appstream
	iptables-libs-1.8.10-11.el9_5.aarch64.rpm	a7f59dc8910127b328ab6c83f6219ec7	-	ol9_aarch64_baseos_latest
	iptables-libs-1.8.10-11.el9_5.aarch64.rpm	a7f59dc8910127b328ab6c83f6219ec7	-	ol9_aarch64_u5_baseos_patch
	iptables-nft-1.8.10-11.el9_5.aarch64.rpm	7f04ab5c9034a757ac4af696d6bf0f0c	-	ol9_aarch64_baseos_latest
	iptables-nft-1.8.10-11.el9_5.aarch64.rpm	7f04ab5c9034a757ac4af696d6bf0f0c	-	ol9_aarch64_u5_baseos_patch
	iptables-nft-services-1.8.10-11.el9_5.noarch.rpm	1543e2c6ad39d1b09441f0836ac74870	-	ol9_aarch64_appstream
	iptables-utils-1.8.10-11.el9_5.aarch64.rpm	3446bcca776ad20400dead91534c52ca	-	ol9_aarch64_baseos_latest
	iptables-utils-1.8.10-11.el9_5.aarch64.rpm	3446bcca776ad20400dead91534c52ca	-	ol9_aarch64_u5_baseos_patch
Oracle Linux 9 (x86_64)	iptables-1.8.10-11.el9_5.src.rpm	a3eabeaebeb090a191fe541d7447a2d8	-	ol9_x86_64_appstream
	iptables-1.8.10-11.el9_5.src.rpm	a3eabeaebeb090a191fe541d7447a2d8	-	ol9_x86_64_baseos_latest
	iptables-1.8.10-11.el9_5.src.rpm	a3eabeaebeb090a191fe541d7447a2d8	-	ol9_x86_64_u5_baseos_patch
	iptables-devel-1.8.10-11.el9_5.i686.rpm	a83b2a3f6d16e3e60be8c75804efa512	-	ol9_x86_64_appstream
	iptables-devel-1.8.10-11.el9_5.x86_64.rpm	9f5bfbc04905c7bdb960a0fbaa96b274	-	ol9_x86_64_appstream
	iptables-libs-1.8.10-11.el9_5.i686.rpm	df99cf31867fee2a68157b4e7cba6f8e	-	ol9_x86_64_baseos_latest
	iptables-libs-1.8.10-11.el9_5.i686.rpm	df99cf31867fee2a68157b4e7cba6f8e	-	ol9_x86_64_u5_baseos_patch
	iptables-libs-1.8.10-11.el9_5.x86_64.rpm	3cf2ea0804536946dadc03a05fbf11c7	-	ol9_x86_64_baseos_latest
	iptables-libs-1.8.10-11.el9_5.x86_64.rpm	3cf2ea0804536946dadc03a05fbf11c7	-	ol9_x86_64_u5_baseos_patch
	iptables-nft-1.8.10-11.el9_5.x86_64.rpm	ff04a9aa086542953013a833062cc0c9	-	ol9_x86_64_baseos_latest
	iptables-nft-1.8.10-11.el9_5.x86_64.rpm	ff04a9aa086542953013a833062cc0c9	-	ol9_x86_64_u5_baseos_patch
	iptables-nft-services-1.8.10-11.el9_5.noarch.rpm	1543e2c6ad39d1b09441f0836ac74870	-	ol9_x86_64_appstream
	iptables-utils-1.8.10-11.el9_5.x86_64.rpm	203e53f08892f7123ac947992d6000b1	-	ol9_x86_64_baseos_latest
	iptables-utils-1.8.10-11.el9_5.x86_64.rpm	203e53f08892f7123ac947992d6000b1	-	ol9_x86_64_u5_baseos_patch