iptables-1.8.13

[Randy McMurchy]

Numerous items on this page need to be addressed: See ​this mail

[Bruce Dubbs]

Now version 1.8.12.

Release notes:

• configure: Avoid addition assignment operators
• libxtables: refuse to run under file capabilities
• man: iptables-restore.8: document flush behaviour for user-defined chains
• nft: revert compat expressions in userdata
• ip[6]tables-translate: fix test failures when WESP is defined
• nft: fix interface comparisons in -C commands
• extensions: libebt_redirect: prevent translation
• configure: Bump version for 1.8.12 release
• nft: Drop interface mask leftovers from post_parse callbacks
• nft: Make add_log() static
• nft: ruleparse: Introduce nft_parse_rule_expr()
• nft: add_{match,target}() can't fail
• nft: Introduce UDATA_TYPE_COMPAT_EXT
• nft-ruleparse: Fallback to compat expressions in userdata
• nft: Pass nft_handle into add_{action,match}()
• nft: Embed compat extensions in rule userdata
• tests: iptables-test: Add nft-compat variant
• extensions: icmp: Support info-request/-reply type names
• xshared: Accept an option if any given command allows it
• extensions: sctp: Translate bare '-m sctp' match
• libxtables: Promote xtopt_esize_by_type() as xtopt_psize getter
• Revert "libxtables: Promote xtopt_esize_by_type() as xtopt_psize getter"
• xtables-monitor: Print -X command for base chains, too
• nft: Support replacing a rule added in the same batch
• libxtables: Store all requested target types
• ruleparse: arp: Fix for all-zero mask on Big Endian
• tests: shell: Review nft-only/0009-needless-bitwise_0
• configure: Auto-detect libz unless explicitly requested
• iptables: fix null dereference parsing bitwise operations
• extensions: man: Add a note about route_localnet sysctl

[Bruce Dubbs]

I will do the version update but leave the ticket open for now.

[Bruce Dubbs]

Updated to iptables-1.8.12 at commit 0437c61a9e.

[Bruce Dubbs]

Now version 1.8.13.

[Bruce Dubbs]

Release notes for 1.8.13

• Revert "libxtables: refuse to run under file capabilities"
• configure: Bump version for 1.8.13 release
• src: fix discards 'const' qualifier

[Bruce Dubbs]

We may want to add 'rm -rf /usr/lib/xtables' before 'make install' to ensure we do not get corruption from the installation of an earlier version.

[Bruce Dubbs]

Fixed at commit 79f2bf6d89.