ELBA-2026-56134

ELBA-2026-56134 - nftables bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-08-18

Description

[[1.0.4-8.el8]]
- Tree-wide use of python3 (Phil Sutter) [RHEL-179874]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-179874]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-179599]
- expression: cleanup expr_ops_by_type() and handle u32 input (Phil Sutter) [RHEL-179599]
- netlink: handle invalid etype in set_make_key() (Phil Sutter) [RHEL-179599]

[[1.0.4-7.el8]]
- xt: Fix translation error path (Phil Sutter) [RHEL-5806]

[[1.0.4-6.el8]]
- evaluate: un-break rule insert with intervals (Phil Sutter) [RHEL-62895]

[[1.0.4-5.el8]]
- xt: Fix fallback printing for extensions matching keywords (Phil Sutter) [RHEL-5806]
- xt: Fall back to generic printing from translation (Phil Sutter) [RHEL-5806]
- xt: Rewrite unsupported compat expression dumping (Phil Sutter) [RHEL-5806]
- xt: Purify enum nft_xt_type (Phil Sutter) [RHEL-5806]
- xt: Delay libxtables access until translation (Phil Sutter) [RHEL-5806]
- Warn for tables with compat expressions in rules (Phil Sutter) [RHEL-5806]

[[1.0.4-4.el8]]
- parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-2596]

[[1.0.4-3.el8]]
- spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]
- rule: check address family in set collapse (Phil Sutter) [RHEL-5160]

[[1.0.4-2.el8]]
- Add expected error records for testsuite runs (Phil Sutter) [2211076]
- tests: monitor: Summarize failures per test case (Phil Sutter) [2211076]

[[1.0.4-1.el8]]
- Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076]
- Rebase onto version 1.0.4 (Phil Sutter) [2211076]

[[0.9.3-26.el8]]
- libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287]
- src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287]
- src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287]
- rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287]
- rule: memleak in __do_add_setelems() (Phil Sutter) [2073287]
- tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924]
- mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924]

[[0.9.3-25.el8]]
- mnl: do not build nftnl_set element list (Phil Sutter) [2047821]
- tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773]
- evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773]
- evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594]
- src: support for restoring element counters (Phil Sutter) [2039594]
- netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	nftables-1.0.4-8.el8_10.src.rpm	518c01ff629c6215aed6ba1485c8469015ba5874e2e109c06af6642c6589aa4b	-	ol8_aarch64_baseos_latest
	nftables-1.0.4-8.el8_10.src.rpm	518c01ff629c6215aed6ba1485c8469015ba5874e2e109c06af6642c6589aa4b	-	ol8_aarch64_codeready_builder
	nftables-1.0.4-8.el8_10.src.rpm	518c01ff629c6215aed6ba1485c8469015ba5874e2e109c06af6642c6589aa4b	-	ol8_aarch64_u10_baseos_patch
	nftables-1.0.4-8.el8_10.aarch64.rpm	497ae3963a0e40587d53df434f52c1469142ecd478cb577dd9f79ba0c542fdb1	-	ol8_aarch64_baseos_latest
	nftables-1.0.4-8.el8_10.aarch64.rpm	497ae3963a0e40587d53df434f52c1469142ecd478cb577dd9f79ba0c542fdb1	-	ol8_aarch64_u10_baseos_patch
	nftables-devel-1.0.4-8.el8_10.aarch64.rpm	a6afd426bd6a233c4999a84906a009dc743c0cf1d3d1de0a461bdc50b16c3159	-	ol8_aarch64_codeready_builder
	python3-nftables-1.0.4-8.el8_10.aarch64.rpm	b5ebefcf0bd2071b827fa07ecd87b89e68c58b861d639639889da3e619020cbf	-	ol8_aarch64_baseos_latest
	python3-nftables-1.0.4-8.el8_10.aarch64.rpm	b5ebefcf0bd2071b827fa07ecd87b89e68c58b861d639639889da3e619020cbf	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	nftables-1.0.4-8.el8_10.src.rpm	518c01ff629c6215aed6ba1485c8469015ba5874e2e109c06af6642c6589aa4b	-	ol8_x86_64_baseos_latest
	nftables-1.0.4-8.el8_10.src.rpm	518c01ff629c6215aed6ba1485c8469015ba5874e2e109c06af6642c6589aa4b	-	ol8_x86_64_codeready_builder
	nftables-1.0.4-8.el8_10.src.rpm	518c01ff629c6215aed6ba1485c8469015ba5874e2e109c06af6642c6589aa4b	-	ol8_x86_64_u10_baseos_patch
	nftables-1.0.4-8.el8_10.i686.rpm	5c8a5036c19d124c913a1882a138d9a6cdc54e14c4575d7c1654d6b4f27bf3ff	-	ol8_x86_64_baseos_latest
	nftables-1.0.4-8.el8_10.i686.rpm	5c8a5036c19d124c913a1882a138d9a6cdc54e14c4575d7c1654d6b4f27bf3ff	-	ol8_x86_64_u10_baseos_patch
	nftables-1.0.4-8.el8_10.x86_64.rpm	a5265e0b76a021c957bac875e53494dd32e46736d060f358eade1493240224b1	-	ol8_x86_64_baseos_latest
	nftables-1.0.4-8.el8_10.x86_64.rpm	a5265e0b76a021c957bac875e53494dd32e46736d060f358eade1493240224b1	-	ol8_x86_64_u10_baseos_patch
	nftables-devel-1.0.4-8.el8_10.i686.rpm	5973fc70a20159d845951019b00876503c6ca81f057d3fc95bed510f9196c6d7	-	ol8_x86_64_codeready_builder
	nftables-devel-1.0.4-8.el8_10.x86_64.rpm	814a189937dbed812d5345d2d3bb3ecb295dde13bfe3c95391ebdd30bb8f546e	-	ol8_x86_64_codeready_builder
	python3-nftables-1.0.4-8.el8_10.x86_64.rpm	2d92eecdbaaa453091fbed178ff8a744b195f52366d883298b4debbc145b151c	-	ol8_x86_64_baseos_latest
	python3-nftables-1.0.4-8.el8_10.x86_64.rpm	2d92eecdbaaa453091fbed178ff8a744b195f52366d883298b4debbc145b151c	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team