ELBA-2026-59381

ELBA-2026-59381 - nftables bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2026-08-25

Description

[[1.1.5-6.el10]]
- tests: Prepare exit codes for automake (Phil Sutter) [RHEL-179035]
- parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-179035]
- intervals: Fix for inconsistent union field use (Phil Sutter) [RHEL-179035]

[[1.1.5-5.el10]]
- Bump revision to overcome pipeline issues (Phil Sutter) [RHEL-128553]

[[1.1.5-4.el10]]
- spec: Require libnftnl-1.3.0-3 for nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
- tests: py: Adjust payloads to changed userdata printing (Phil Sutter) [RHEL-128553]
- tests: py: Update payload records (Phil Sutter) [RHEL-128553]
- tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-128553]
- tests: py: tools: Add regen_payloads.sh (Phil Sutter) [RHEL-128553]
- netlink: Make use of nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-128553]
- netlink: No need to reference array when passing as pointer (Phil Sutter) [RHEL-128553]
- netlink: Introduce struct nft_data_linearize::sizes (Phil Sutter) [RHEL-128553]
- netlink: Introduce struct nft_data_linearize::byteorder (Phil Sutter) [RHEL-128553]
- expression: Set range expression 'len' field (Phil Sutter) [RHEL-128553]
- intervals: Convert byte order implicitly (Phil Sutter) [RHEL-128553]
- mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-128553]
- mergesort: Fix sorting of string values (Phil Sutter) [RHEL-128553]
- segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-128553]

[[1.1.5-3.el10]]
- Update expected test suite results (Phil Sutter) [RHEL-121194]
- tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]

[[1.1.5-2.el10]]
- spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
- mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
- tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
- parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
- mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]

[[1.1.5-1.el10]]
- doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
- doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
- build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
- tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
- tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
- tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
- tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
- optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
- datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
- src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
- doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
- libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
- monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
- tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
- tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
- monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
- tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
- parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
- Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]

[[1.1.1-9.el10]]
- fib: Fix for existence check on Big Endian (Phil Sutter) [RHEL-113851]

[[1.1.1-8.el10]]
- Bump revision for a side-tag build (Phil Sutter) [RHEL-125122]

[[1.1.1-7.el10]]
- spec: BuildRequire libnftnl-devel-1.2.8-4 (Phil Sutter) [RHEL-125122]

[[1.1.1-6.el10]]
- Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
- table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
- doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
- trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	nftables-1.1.5-6.el10_2.src.rpm	58f89e5ca980274df3a1efa0f5ca2bdb68ceb328ed42e28b011d685c52df2c2f	-	ol10_aarch64_baseos_latest
	nftables-1.1.5-6.el10_2.src.rpm	58f89e5ca980274df3a1efa0f5ca2bdb68ceb328ed42e28b011d685c52df2c2f	-	ol10_aarch64_codeready_builder
	nftables-1.1.5-6.el10_2.src.rpm	58f89e5ca980274df3a1efa0f5ca2bdb68ceb328ed42e28b011d685c52df2c2f	-	ol10_aarch64_u2_baseos_patch
	nftables-1.1.5-6.el10_2.aarch64.rpm	02eb36ffd814697c36702828cbcba414a4283c4301630a011d057fda8a991544	-	ol10_aarch64_baseos_latest
	nftables-1.1.5-6.el10_2.aarch64.rpm	02eb36ffd814697c36702828cbcba414a4283c4301630a011d057fda8a991544	-	ol10_aarch64_u2_baseos_patch
	nftables-devel-1.1.5-6.el10_2.aarch64.rpm	2d67de3ddb695ac2d7661818e9bc2797d900e0f810ae761e03382e25f2940375	-	ol10_aarch64_codeready_builder
	python3-nftables-1.1.5-6.el10_2.aarch64.rpm	e2511983dbe364b3fc5d775d980b227135be49b853a2f637fb03b0fed65eaafb	-	ol10_aarch64_baseos_latest
	python3-nftables-1.1.5-6.el10_2.aarch64.rpm	e2511983dbe364b3fc5d775d980b227135be49b853a2f637fb03b0fed65eaafb	-	ol10_aarch64_u2_baseos_patch
Oracle Linux 10 (x86_64)	nftables-1.1.5-6.el10_2.src.rpm	58f89e5ca980274df3a1efa0f5ca2bdb68ceb328ed42e28b011d685c52df2c2f	-	ol10_x86_64_baseos_latest
	nftables-1.1.5-6.el10_2.src.rpm	58f89e5ca980274df3a1efa0f5ca2bdb68ceb328ed42e28b011d685c52df2c2f	-	ol10_x86_64_codeready_builder
	nftables-1.1.5-6.el10_2.src.rpm	58f89e5ca980274df3a1efa0f5ca2bdb68ceb328ed42e28b011d685c52df2c2f	-	ol10_x86_64_u2_baseos_patch
	nftables-1.1.5-6.el10_2.x86_64.rpm	0b31c389806b697550afb0e1ce8ed62e6ab8a647bf62ad07c5007ae3e63ffcec	-	ol10_x86_64_baseos_latest
	nftables-1.1.5-6.el10_2.x86_64.rpm	0b31c389806b697550afb0e1ce8ed62e6ab8a647bf62ad07c5007ae3e63ffcec	-	ol10_x86_64_u2_baseos_patch
	nftables-devel-1.1.5-6.el10_2.x86_64.rpm	ee46bac721ffa3706782047330e3b8f4903f4854ac83fb051c80ddff75909848	-	ol10_x86_64_codeready_builder
	python3-nftables-1.1.5-6.el10_2.x86_64.rpm	0319c2d1912d81190ea8ab693095b19f95a87900ae86fcd9eba5070158b04808	-	ol10_x86_64_baseos_latest
	python3-nftables-1.1.5-6.el10_2.x86_64.rpm	0319c2d1912d81190ea8ab693095b19f95a87900ae86fcd9eba5070158b04808	-	ol10_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team