ELBA-2025-31403

ELBA-2025-31403 - iptables-epel Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2025-02-15

Description

[[1.8.10-11.1.el9]]
- Import latest changes from EL9; Fixes: RHBZ#2343682

[[1.8.10-11.el9]]
- libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027]

[[1.8.10-10.el9]]
- spec: Fix build on c9s (Phil Sutter) [RHEL-72005]

[[1.8.10-9.el9]]
- spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005]

[[1.8.10-8.el9]]
- Revert 'xshared: Print protocol numbers if --numeric was given' (Phil Sutter) [RHEL-70173]

[[1.8.10-7.el9]]
- Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284]

[[1.8.10-6.el9]]
- Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284]

[[1.8.10-4.1.el9]]
- Import latest changes from EL9; Fixes: RHBZ#2310158

[[1.8.10-5.el9]]
- xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
- xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
- tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
- xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
- xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
- xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
- nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
- nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
- nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]

[[1.8.10-4.el9]]
- spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797]

[[1.8.10-3.el9]]
- extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
- spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
- nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
- spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]

[1.8.10-2.2]
- Hardcode dist for iptables dependency, since on epel9-next it evaluates to
el9.next while upstream's disttag is only el9

[1.8.10-2.1]
- Import latest changes from CentOS Stream; Fixes: RHBZ#2270912

[[1.8.10-2.el9]]
- ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147]

[[1.8.10-1.el9]]
- spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
- Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]

[1.8.8-6.2]
- Slightly loosen iptables-libs requirement, for some reason the c9s disttag is el9_1

[1.8.8-6.1]
- Rebase iptables-epel on c9s' iptables-1.8.8-6

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	iptables-epel-1.8.10-11.1.el9.src.rpm	7b7f778ced8d23098d8e5f140c417794	-	ol9_aarch64_developer_EPEL
	iptables-legacy-1.8.10-11.1.el9.aarch64.rpm	4017d0f0c4400c075311c8314d3f7a76	-	ol9_aarch64_developer_EPEL
	iptables-legacy-devel-1.8.10-11.1.el9.aarch64.rpm	236b198f293bca4167eae6360ac125cc	-	ol9_aarch64_developer_EPEL
	iptables-legacy-libs-1.8.10-11.1.el9.aarch64.rpm	80943a46c629258cefaa1c08b5a94cda	-	ol9_aarch64_developer_EPEL
	iptables-services-1.8.10-11.1.el9.noarch.rpm	3c30c2129d692bd15fca3edf8859a489	-	ol9_aarch64_developer_EPEL
Oracle Linux 9 (x86_64)	iptables-epel-1.8.10-11.1.el9.src.rpm	7b7f778ced8d23098d8e5f140c417794	-	ol9_x86_64_developer_EPEL
	iptables-legacy-1.8.10-11.1.el9.x86_64.rpm	46f0aee0b8892636617d91afdad79d51	-	ol9_x86_64_developer_EPEL
	iptables-legacy-devel-1.8.10-11.1.el9.x86_64.rpm	4a13229d1062da900db27b0caa60e304	-	ol9_x86_64_developer_EPEL
	iptables-legacy-libs-1.8.10-11.1.el9.x86_64.rpm	b1e4f5709bf57302bcf001cecc40f14f	-	ol9_x86_64_developer_EPEL
	iptables-services-1.8.10-11.1.el9.noarch.rpm	3c30c2129d692bd15fca3edf8859a489	-	ol9_x86_64_developer_EPEL