Changelog for nftables-1.0.9-1.el9.i686.rpm :

* Fri Oct 27 2023 Phil Sutter [1.0.9-1.el9]- spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]- Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]
* Thu Sep 21 2023 Phil Sutter [1.0.4-11.el9]- rule: check address family in set collapse (Phil Sutter) [RHEL-5908]- spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]
* Tue Feb 21 2023 Phil Sutter [1.0.4-10.el9]- netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]- optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]- optimize: Do not return garbage from stack (Phil Sutter) [2160049]- netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]- meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]- mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]- owner: Fix potential array out of bounds access (Phil Sutter) [2160049]
* Fri Feb 17 2023 Phil Sutter [1.0.4-9.el9]- tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]- netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]- netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]
* Thu Feb 09 2023 Phil Sutter [1.0.4-8.el9]- monitor: Sanitize startup race condition (Phil Sutter) [2130721]- evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]- src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]- evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]- netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]- tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]- debug: dump the l2 protocol stack (Phil Sutter) [2094887]- proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]- netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]- netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]- intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]- intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]- scanner: don\'t pop active flex scanner scope (Phil Sutter) [2113874]- parser: add missing synproxy scope closure (Phil Sutter) [2113874]- tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]- doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]
* Tue Jan 31 2023 Phil Sutter [1.0.4-7.el9]- One more attempt at fixing expected error records (Phil Sutter) [1973687]
* Tue Jan 31 2023 Phil Sutter [1.0.4-6.el9]- Realy fix expected error records (Phil Sutter) [1973687]
* Fri Jan 27 2023 Phil Sutter [1.0.4-5.el9]- Fix expected error records (Phil Sutter) [1973687]
* Fri Jan 20 2023 Phil Sutter [1.0.4-4.el9]- Add expected error records for testsuite runs (Phil Sutter) [1973687]
* Fri Nov 25 2022 Phil Sutter [1.0.4-3.el9]- Prevent port-shadow attacks in sample nat config (Phil Sutter) [2061940]
* Fri Jun 24 2022 Phil Sutter [1.0.4-2.el9]- intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]- intervals: do not empty cache for maps (Phil Sutter) [1917398]- intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]- rule: collapse set element commands (Phil Sutter) [1917398]- tests: shell: runtime set element automerge (Phil Sutter) [1917398]
* Thu Jun 09 2022 Phil Sutter - 1:1.0.4-1- Review package dependencies- new version 1.0.4
* Tue Mar 01 2022 Phil Sutter - 1:0.9.8-13- tests: extend dtype test case to cover expression with integer type- evaluate: set evaluation context for set elements
* Fri Jan 14 2022 Phil Sutter - 1:0.9.8-12- evaluate: pick data element byte order, not dtype one
* Wed Dec 08 2021 Phil Sutter - 1:0.9.8-11- tests: py: add dnat to port without defining destination address- evaluate: fix inet nat with no layer 3 info- include: missing sctp_chunk.h in Makefile.am- exthdr: Implement SCTP Chunk matching- scanner: sctp: Move to own scope- scanner: introduce start condition stack- json: Simplify non-tcpopt exthdr printing a bit
* Wed Dec 08 2021 Phil Sutter - 1:0.9.8-10- tests: shell: better parameters for the interval stack overflow test- tests: shell: $NFT needs to be invoked unquoted
* Thu Nov 11 2021 Phil Sutter - 1:0.9.8-9- doc: nft.8: Extend monitor description by trace
* Fri Nov 05 2021 Phil Sutter - 1:0.9.8-8- tests: cover baecd1cf2685 (\"segtree: Fix segfault when restoring a huge interval set\")- segtree: Fix segfault when restoring a huge interval set