Changelog for
libipset13-7.22-lp154.2.1.x86_64.rpm :
* Wed Jun 05 2024 Jan Engelhardt
- Update to release 7.22
* ipset: fix json output format for IPSET_OPT_IP
* netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
* Mon Feb 12 2024 Jan Engelhardt - Update to release 7.21
* Save mode was broken; this was repaired.
* Wed Jan 31 2024 Jan Engelhardt - Update to release 7.20
* Bash completion utility updated
* Thu Sep 21 2023 Jan Engelhardt - Update to release 7.19
* Add json output to list command
* Fri Dec 30 2022 Jan Engelhardt - Update to release 7.17
* No userspace changes (kernel modules are not generated here for openSUSE, see kernel-default instead)
* Mon Nov 21 2022 Jan Engelhardt - Update to release 7.16
* Add bitmask support to hash:netnet, hash:ipport, hash:ip
* Add support for new bitmask parameter
* Fri Nov 04 2022 Danilo Spinella - Tumbleweed is not affected by the following SLE issues: bsc#1122853
* Wed Aug 04 2021 Paolo Stivanin - Update to release 7.15
* netfilter: ipset: Fix maximal range check in hash_ipportnet4_uadt()
* Wed Jul 28 2021 Jan Engelhardt - Update to release 7.14
* Allow specifying protocols by number
* Limit the maximum range of consecutive elements to add/delete
* Fri Feb 19 2021 Jan Engelhardt - Update to release 7.11
* Argument parsing buffer overflow in ipset_parse_argv fixed
* Sun Dec 20 2020 Jan Engelhardt - Update to release 7.10
* Fix shift-out-of-bounds in htable_bits()
* Thu Nov 19 2020 Jan Engelhardt - Update to release 7.9
* Enable memory accounting for ipset allocations
* Expose the initval hash parameter to userspace
* Add bucketsize parameter to all hash types
* Support the -exist flag with the destroy command
* Mon Feb 24 2020 Jan Engelhardt - Update to release 7.6
* Add checking system_power_efficient_wq in the source tree.
* Fri Jan 10 2020 Jan Engelhardt - Update to release 7.5
* netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present.
* netfilter: xt_set: Do not restrict --map-set to the mangle table.
* Fri Nov 01 2019 Jan Engelhardt - Update to release 7.4
* Wildcard support for the \"hash:net,iface\" type.
* Mon Aug 19 2019 Jan Engelhardt - Update to new upstream release 7.3
* Fix rename concurrency with listing, which can result broken list/save results.
* ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets.
* ipset: Actually allow destination MAC address for hash:ip,mac sets too.
* Mon Jun 10 2019 Jan Engelhardt - Update to new upstream release 7.2
* ipset: Fix memory accounting for hash types on resize
* Tue Dec 11 2018 Jan Engelhardt - Update to new upstream release 7.1
* Correct the manpage about the sort option
* Implement sorting for hash types in the ipset tool
* Fix to list/save into file specified by option- Remove ipset-file.diff (merged)
* Tue Nov 20 2018 Arjen de Korte - Add ipset-file.diff [boo#1116432].
* Tue Oct 30 2018 Jan Engelhardt - Update to new upstream release 7.0
* A new internal protocol version between the kernel and userspace is used. This is required in order to support two new functions and the extendend LIST operation, which makes possible to run ipset in every case entirely over netlink, without the need to use getsockopt().
* The userspace library was reworked so it can be embedded without calling the binary.
* Tue Apr 10 2018 jengelhAATTinai.de- Update to new upstream release 6.38
* Fix parsing service names for ports.
* Sat Mar 03 2018 jengelhAATTinai.de- Update to new upstream release 6.36
* Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to memory exhaustion, which has been fixed.- Drop 0001-build-do-install-libipset-args.h.patch (merged)
* Mon Jan 22 2018 jengelhAATTinai.de- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].
* Sat Jan 06 2018 jengelhAATTinai.de- Update to new upstream release 6.35
* Userspace revision handling is reworked
* Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
* Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit()
* netfilter: ipset: add resched points during set listing
* Fix \"don\'t update counters\" mode when counters used at the matching
* netfilter: ipset: Fix race between dump and swap
* Sat Sep 23 2017 jengelhAATTinai.de- Update to new upstream release 6.34
* Reset state after a command failed, when multiple ones are issued.
* Handle padding attribute properly in userspace.
* Test to check the fix to add an IPv4 range containing more than 2^31 addresses.- Remove ipset-6.33-export-func.diff (merged)
* Sun Sep 17 2017 jengelhAATTinai.de- Update to new upstream release 6.33
* Report if the option is supported by a newer kernel release- Add ipset-6.33-export-func.diff
* Fri Sep 15 2017 kstreitovaAATTsuse.com- fix build for Factory
* Fri Mar 17 2017 jengelhAATTinai.de- Update to new upstream release 6.31
* ipset: avoid kernel null pointer exception in ipset list:set
* fix bug: sometimes valid entries in hash:
* types of sets were evicted- Update to new upstream release 6.32
* fix possible truncated output in ipset output buffer handling
* Thu Oct 20 2016 jengelhAATTinai.de- Update to new upstream release 6.30
* hash:ipmac type support added to ipset
* Wed Mar 16 2016 jengelhAATTinai.de- Update to new upstream release 6.29
* Fix race condition in ipset save, swap and delete
* Sat Mar 12 2016 jengelhAATTinai.de- Update to new upstream release 6.28
* Test added to check 0.0.0.0/0,iface to be matched in hash:net,iface type
* Check IPSET_ATTR_ETHER netlink attribute length
* Fix set:list type crash when flush/dump set in parallel
* Allow a 0 netmask with hash_netiface type- Restore unreviewed deletion of KMP production, undo spec-cleaner refucktoring- Add ipset-destdir.diff
* Mon Jan 18 2016 kstreitovaAATTsuse.com- update to 6.27:
* kernel part changes
* fix reported memory size for hash:
* types
* fix hash type expire: release empty hash bucket block
* fix hash type expiration: incorrect index fixed
* collapse same condition body to a single one
* fix extension alignment
* compatibility: include linux/export.h when needed
* compatibility: make sure vmalloc.h is included for kvfree()
* compatibility: Fix detecting \'struct net\' in \'struct tcf_ematch\'
* compatibility: Protect definition of RCU_INIT_POINTER in compatibility header file
* netfilter: ipset: Fix sleeping memory allocation in atomic context (Nikolay Borisov)
* userspace changes
* handle uint64_t alignment issue in ipset tool- disable KMP build as we support the in-kernel version instead. Remove ipset-preamble file that is no longer needed [bsc#962345]- run spec-cleaner
* Sun Aug 30 2015 jengelhAATTinai.de- Update to new upstream release 6.26
* Out of bound access in hash:net
* types fixed
* Make struct htype per ipset family
* Optimize hash creation routine
* Thu Jun 25 2015 jengelhAATTinai.de- Update to new upstream release 6.25.1
* Add element count to all set types header
* Add element count to hash headers
* Support linking libipset to C++ programs
* When a single set is destroyed, make sure it cannot be grabbed by dump
* Check CIDR value only when attribute is given
* Permit CIDR equal to the host address CIDR in IPv6
* Mon Nov 24 2014 jengelhAATTinai.de- Update to new upstream release 6.24
* Alignment problem between 64bit kernel 32bit userspace fixed
* Potential read beyond the end of buffer resolved
* Fix parallel resizing and listing of the same set
* Introduce RCU in all set types instead of rwlock per set
* Remove rbtree from hash:net,iface in order to run under RCU
* Explicitly add padding elements to hash:net,net and hash:net,port,net
* Allocate the proper size of memory when /0 networks are supported
* Simplify cidr handling for hash:
*net
* types
* Indicate when /0 networks are supported
