iptables: Update to version 1.8.12

Message ID 20260227181838.3716442-6-adolf.belka@ipfire.org
State New
Headers
Series iptables: Update to version 1.8.12 |

Commit Message

Adolf Belka 27 Feb 2026, 6:18 p.m. UTC
- Update from version 1.8.11 to 1.8.12
- No change to rootfile
- Changelog
    1.8.12
      configure: Avoid addition assignment operators
      libxtables: refuse to run under file capabilities
      man: iptables-restore.8: document flush behaviour for user-defined chains
      nft: revert compat expressions in userdata
      ip[6]tables-translate: fix test failures when WESP is defined
      nft: fix interface comparisons in `-C` commands
      extensions: libebt_redirect: prevent translation
      configure: Bump version for 1.8.12 release
      nft: Drop interface mask leftovers from post_parse callbacks
      nft: Make add_log() static
      nft: ruleparse: Introduce nft_parse_rule_expr()
      nft: __add_{match,target}() can't fail
      nft: Introduce UDATA_TYPE_COMPAT_EXT
      nft-ruleparse: Fallback to compat expressions in userdata
      nft: Pass nft_handle into add_{action,match}()
      nft: Embed compat extensions in rule userdata
      tests: iptables-test: Add nft-compat variant
      extensions: icmp: Support info-request/-reply type names
      xshared: Accept an option if any given command allows it
      extensions: sctp: Translate bare '-m sctp' match
      libxtables: Promote xtopt_esize_by_type() as xtopt_psize getter
      Revert "libxtables: Promote xtopt_esize_by_type() as xtopt_psize getter"
      xtables-monitor: Print -X command for base chains, too
      nft: Support replacing a rule added in the same batch
      libxtables: Store all requested target types
      ruleparse: arp: Fix for all-zero mask on Big Endian
      tests: shell: Review nft-only/0009-needless-bitwise_0
      configure: Auto-detect libz unless explicitly requested
      iptables: fix null dereference parsing bitwise operations
      extensions: man: Add a note about route_localnet sysctl

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/iptables | 30 ++++++++++++++----------------
 1 file changed, 14 insertions(+), 16 deletions(-)
  

Patch

diff --git a/lfs/iptables b/lfs/iptables
index e8c4069d6..398dbb4be 100644
--- a/lfs/iptables
+++ b/lfs/iptables
@@ -1,7 +1,7 @@ 
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 1.8.11
+VER        = 1.8.12
 
 THISAPP    = iptables-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -41,7 +41,7 @@  objects = $(DL_FILE) \
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 netfilter-layer7-v2.23.tar.gz = $(URL_IPFIRE)/netfilter-layer7-v2.23.tar.gz
 
-$(DL_FILE)_BLAKE2 = 82daca3940e253f6fda7cf5b3332488c31391ff66c0112c0cae2645ab61918f81e6028ea2b1e1385f21e4c5ff8cd64cba31072a2417a2ab696fe1c6b5464cea1
+$(DL_FILE)_BLAKE2 = 5516aadcf413efde272b09d1747e78e19f1d9e5481cdfdfe2360ca5f16926bb17535f58e4014a3616c59da83f41b39fc71e591c916bc309c7ca31701785a9e7e
 netfilter-layer7-v2.23.tar.gz_BLAKE2 = 5c8ab722f6fbc126f2f65ecf401de5fc40560c20e3be52f783db34410446185dcb6781b3148e4a174e8b2d2c290bec0342dea95e8cefc35c39345617fa7a8fdc
 
 install : $(TARGET)
@@ -78,22 +78,20 @@  $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	cd $(DIR_SRC) && tar zxf $(DIR_DL)/netfilter-layer7-v2.23.tar.gz
 	cd $(DIR_APP) && cp -vf $(DIR_SRC)/netfilter-layer7-v2.23/iptables-1.4.3forward-for-kernel-2.6.20forward/* \
 	                 ./extensions/
-
 	cd $(DIR_APP) && ./configure \
-		--prefix=/usr \
-		--libdir=/lib \
-		--includedir=/usr/include \
-		--enable-libipq \
-		--with-xtlibdir=/lib/xtables \
-		--libexecdir=/lib \
-		--bindir=/sbin \
-		--sbindir=/sbin \
-		--mandir=/usr/share/man \
-		--disable-nftables \
-		--with-pkgconfigdir=/usr/lib/pkgconfig
+				--prefix=/usr \
+				--libdir=/lib \
+				--includedir=/usr/include \
+				--enable-libipq \
+				--with-xtlibdir=/lib/xtables \
+				--libexecdir=/lib \
+				--bindir=/sbin \
+				--sbindir=/sbin \
+				--mandir=/usr/share/man \
+				--disable-nftables \
+				--with-pkgconfigdir=/usr/lib/pkgconfig
 
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
-
 	@rm -rf $(DIR_APP) $(DIR_SRC)/netfilter-layer7*
 	@$(POSTBUILD)