nftables (1.1.5-2)
[PTS] [DDPO]
NEW: VCS has unreleased changes: 1.1.6-1 > 1.1.5-2
- Git: https://salsa.debian.org/pkg-netfilter-team/pkg-nftables.git
-
- Branch: master
- Path: debian/changelog
- Repo size: 4198400
- Browser: https://salsa.debian.org/pkg-netfilter-team/pkg-nftables
- Last scan: 2025-12-06 22:36:02+00
- Next scan: 2025-12-14 03:28:00+00
- Merge requests: 1
- CI pipeline status: success
- Debian changelog in Git:
nftables (1.1.6-1) unstable; urgency=medium
* [76930dd] d/watch: add `Matching-Pattern`, use `@PACKAGE@` in `Source:`
* [2ffdc3a] New upstream version 1.1.6 (Closes: #1121439)
- Complete lightweight tunnel template support, including vxlan,
geneve and erspan
- Support for wildcard in netdev hooks
- Support to pass up bridge frame to the bridge device for local
processing
- fib expression correct bytecode for Big Endian and other Big Endian
fixes
- man nft(8) documentation updates
* [5e550d0] d/patches: drop upstreamed patches
* [4f36aba] d/control: bump min. version for libnftnl-dev build-dep to
1.3.1
* [475dd5e] d/rules: drop obsolete configure option
* [c36db28] d/rules: suppress running of test-suites
* [5a6afc9] d/tests: drop obsolete minimum kernel-version checks from
test-runners
* [d122d74] d/t/internaltest-monitor.sh: use `-H` option to test with
installed nft
* [77d80c9] d/t/internaltest-py.sh: use installed nft executable
* [45455d7] d/t/internaltest-json_check.sh: run new test-suite
* [f9b7018] d/t/control: add gawk dependency for shell test-suite
* [4323286] d/tests: correct json echo test-runner name
* [25425ab] d/rules: use `$(DEB_SOURCE)` for source package name
* [6d847bb] d/rules: use `$(SOURCE_DATE_EPOCH)` for build time-stamp
* [5b924b4] d/p/fix-man-page-typo.patch: new patch to fix typo
-- Jeremy Sowden <azazel@debian.org> Sat, 06 Dec 2025 21:45:27 +0000
- This branch is 50 commits ahead of tag upstream/1.1.6
- Git log:
commit 673b90feee6f03027d06d6cb83310f108dcfe3f0
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 21:45:46 2025 +0000
d/changelog: update entry for 1.1.6-1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 5b924b4d350327785e527ef715b584a8514a0af5
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 21:31:12 2025 +0000
d/p/fix-man-page-typo.patch: new patch to fix typo
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 700a7ab12d405953e674c88eb4ea417f40d9db56
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 18:34:48 2025 +0000
d/changelog: update entry for 1.1.6-1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 6d847bbc8130f605546081e5298e2e072490b0fd
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 18:22:21 2025 +0000
d/rules: use `$(SOURCE_DATE_EPOCH)` for build time-stamp
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 25425ab28cf517b45a67ea95a156dd27f5f3ea49
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 18:21:54 2025 +0000
d/rules: use `$(DEB_SOURCE)` for source package name
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 4323286a19a725a929ae1f86d6278439f8edba45
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 17:54:07 2025 +0000
d/tests: correct json echo test-runner name
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 866a8734b86ba9aae88377bb137b3eec0c6ba4e3
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 17:16:43 2025 +0000
d/changelog: 1.1.6 closes #1121439
Gbp-Dch: Ignore
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 2da30d68bdb62a9572d1efc107832825898f5acc
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 16:44:31 2025 +0000
d/changelog: finalize entry for 1.1.6-1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit f9b701836b6d0a3047897dcca4ec1e10d31fcaf9
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 14:52:50 2025 +0000
d/t/control: add gawk dependency for shell test-suite
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 45455d7d07f1470ecdb38ed987768ea661efac4e
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 14:10:01 2025 +0000
d/t/internaltest-json_check.sh: run new test-suite
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 77d80c9caf13b8d0953d1ac4fe658c1880555ba1
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 14:08:30 2025 +0000
d/t/internaltest-py.sh: use installed nft executable
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit d122d746d343424590729cda8d214e8fe162996d
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 14:06:31 2025 +0000
d/t/internaltest-monitor.sh: use `-H` option to test with installed nft
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 5a6afc954065d3960d0c1911765a3e9db76d845c
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 14:06:31 2025 +0000
d/tests: drop obsolete minimum kernel-version checks from test-runners
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit c36db28c9e4c1a8329a9751aae0c927966c711f6
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 12:17:35 2025 +0000
d/rules: suppress running of test-suites
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 475dd5ed4c185d5493cd5a9a841723d5fa583521
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 12:13:14 2025 +0000
d/rules: drop obsolete configure option
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 4f36abadefa1438bd20cc023e45bb73a33f73da6
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 12:01:50 2025 +0000
d/control: bump min. version for libnftnl-dev build-dep to 1.3.1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit fa7baa31a4a017aeecee29fe59a9f149dcf96ad5
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 11:56:15 2025 +0000
d/changelog: add entry for 1.1.6-1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 3c9fbb9ea5895249dc4c2018ad8b9ef5ec9185d5
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Dec 6 11:55:32 2025 +0000
d/patches: drop upstreamed patches
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit ca12f0569aabd02ae12922c42e9a535e25c513cc
Merge: 76930dd 2ffdc3a
Author: Jeremy Sowden <azazel@debian.org>
Date: Fri Dec 5 17:09:34 2025 +0000
Update upstream source from tag 'upstream/1.1.6'
Update to upstream version '1.1.6'
with Debian dir b49dd774c7dfcfd07e5afd7941a64e59d08238f4
commit 76930dd576724e0827b957ae387ecc315ba13126
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Sep 27 09:15:26 2025 +0100
d/watch: add `Matching-Pattern`, use `@PACKAGE@` in `Source:`
The default matching pattern suffices, but uscan warns about the absence of one,
so specify it explicitly.
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 428eadf52352a53179b81335525b796d1a5aa6c3
Author: Jeremy Sowden <azazel@debian.org>
Date: Thu Sep 25 22:32:03 2025 +0100
d/changelog: add entry for 1.1.5-2
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 12b99b319ba53c903ed203674a26b938448b85b1
Author: Jeremy Sowden <azazel@debian.org>
Date: Thu Sep 25 22:20:44 2025 +0100
d/watch: update to version 5
Drop filter of ancient versions.
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 8b66a7c4f6254748263b4f7592f60f9400fa2060
Author: Jeremy Sowden <azazel@debian.org>
Date: Thu Sep 25 21:50:07 2025 +0100
d/patches: add upstream patch to fix duplication of included rules files
Closes: #1112512
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 5a831c681f66ebf0c3231499f738fd0425913411
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Sep 20 14:52:01 2025 +0100
d/patches: add upstreamed patch to fix systemd service installation
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 383ae0463e3717677b4cb9f633411ba92539a09c
Author: Jeremy Sowden <azazel@debian.org>
Date: Sat Sep 20 14:52:17 2025 +0100
d/not-installed: remove nftables.service.8 and main.nft
This reverts commit 68b6459912f432398a27d59b384eb8f315d0083f.
It is superseded by the following commit 20254baa1c62 ("d/patches: add
upstreamed patch to fix systemd service installation").
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit edd38ca8c12451098bf0e1d7cd85adfcd61a3905
Author: Jeremy Sowden <azazel@debian.org>
Date: Fri Aug 29 16:53:22 2025 +0100
d/changelog: add entry for 1.1.5-1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 68b6459912f432398a27d59b384eb8f315d0083f
Author: Jeremy Sowden <azazel@debian.org>
Date: Fri Aug 29 16:52:27 2025 +0100
d/not-installed: don't package unneeded nftables.service.8 and main.nft
Since 1.1.5, upstream has included a systemd service file, related man-page and
example rule-set, By default the service file is not installed, but the man-page
and rule-set are. However, since the Debian package provides its own service
file, the upstream one is not required, so we don't package the man-page or
rule-set, either.
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 2ebb956ee6da9544fdb722df0f59f90044ec3b94
Merge: fd7548b 05b2c30
Author: Jeremy Sowden <azazel@debian.org>
Date: Wed Aug 27 22:51:36 2025 +0100
Update upstream source from tag 'upstream/1.1.5'
Update to upstream version '1.1.5'
with Debian dir 2eda2bbbfe567fac4ba88430c27739e86a4bd6b0
commit fd7548b0c6c97fc1b7d139240e9bfa87208c4470
Author: Jeremy Sowden <azazel@debian.org>
Date: Tue Aug 26 12:25:56 2025 +0100
d/changelog: add entry for 1.1.4-2
commit d043c11e6722e3159c2af2b351544d2586bbd589
Author: Jeremy Sowden <azazel@debian.org>
Date: Tue Aug 26 12:20:42 2025 +0100
d/control: bump min. version for libnftnl-dev build-dep to 1.3.0
Closes: #1112100
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 5f64ae24472e4e38b53f60df17f29c4bcef54a59
Author: Jeremy Sowden <azazel@debian.org>
Date: Sun Aug 24 17:12:30 2025 +0100
d/changelog: finalize entry for 1.1.4-1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 3398ce0733176fb9d60a3120a3573cdcb7f178db
Author: Jeremy Sowden <azazel@debian.org>
Date: Sun Aug 24 16:45:42 2025 +0100
d/u/signing-key.asc: minimize key
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 118b1dc0344432f3f708716e16a819b0dca3e64d
Author: Jeremy Sowden <azazel@debian.org>
Date: Sun Aug 24 14:41:38 2025 +0100
d/rules: don't install man-page link in the presence of "nodoc" build option
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 91849303934d1030bf9b109273af9b6eff06a42d
Author: Jeremy Sowden <azazel@debian.org>
Date: Fri Aug 15 14:39:43 2025 +0100
d/changelog: add entry for 1.1.4-1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit 5e22c48e560e08c1d8bffd4d05db840077859fa4
Merge: 745cb44 0363601
Author: Jeremy Sowden <azazel@debian.org>
Date: Fri Aug 15 14:34:28 2025 +0100
Update upstream source from tag 'upstream/1.1.4'
Update to upstream version '1.1.4'
with Debian dir e8ab93f86692694d8ebb7c4763928d32d7ae4f92
commit 745cb44678614f1a80ab23392a60f5bc7589eaa6
Author: Jeremy Sowden <azazel@debian.org>
Date: Tue Jul 1 15:56:19 2025 +0100
d/control: bump Standards-Version to 4.7.2
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit c4661483f7cf95d21e7bbe5d19fd9e373c779594
Author: Jeremy Sowden <azazel@debian.org>
Date: Tue Jun 10 21:19:08 2025 +0100
d/changelog: add entry for 1.1.3-1
Signed-off-by: Jeremy Sowden <azazel@debian.org>
commit eb9783a99b841f6f41e3db7715d7b36fbc881ed6
Merge: 1e75be8 c73e482
Author: Jeremy Sowden <azazel@debian.org>
Date: Tue Jun 10 21:18:00 2025 +0100
Update upstream source from tag 'upstream/1.1.3'
Update to upstream version '1.1.3'
with Debian dir f16fe6ead23b504bed2233e590e07ec6b8f1b235
commit 1e75be82e3b6f7d8c23601f6f76255937eaec8aa
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Tue Apr 15 23:30:01 2025 +0200
d/changelog: generate entry for 1.1.2-1 unstable
New changelog entry.
Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit 86465b79e6a428aa3f854b63fdc5b517fc4aa0ec
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Tue Apr 15 23:28:55 2025 +0200
nftables: bump build-dep on libnftnl to 1.2.9
New build dependency version.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit 22577cd742307c946c26fc671b2badfbc274fafb
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Tue Apr 15 23:26:22 2025 +0200
New upstream version 1.1.2
commit 3649fbe767bf95a6753327a67f8acf81a24a1d1e
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Tue Apr 15 23:25:35 2025 +0200
d/upstream/signing-key.asc: refresh key
The Netfilter project is now using a new key.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit 4dd66909609214e54230572ea717edb4984bb46a
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Fri Oct 4 11:09:25 2024 +0200
d/changelog: generate entry for 1.1.1-1 unstable
New changelog entry.
Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit eda2aa7ef0a43aa7275a458fbe0b6206ee5dfe3a
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Fri Oct 4 11:12:48 2024 +0200
d/copyright: drop include/linux/netfilter_decnet.h reference
Not included in upstream tarball.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit 33a7e22bcd00de95a61150bd05d9ffdc339e54a7
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Fri Oct 4 11:08:43 2024 +0200
d/patches: drop 000-upstream-cache-fix-revert.patch
This is included in the latest upstream tarball.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit 13795602a1cca60760dca5c4717b8e4e31ee89e1
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Fri Oct 4 11:06:48 2024 +0200
nftables: bump libnftnl build-dep to 1.2.8
Latest upstream release requires libnftnl 1.2.8.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit 42dbb38187bec3d60a244eef9002cac4f789dcf7
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Thu Oct 3 22:04:53 2024 +0200
d/changelog: fix typo in ealier 1.1.0-2 entry
Fix changelog typo.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit fa3c7787741b90c734d37a03f533a68615628150
Merge: 787d8a0 014d3ef
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Thu Oct 3 22:02:11 2024 +0200
Update upstream source from tag 'upstream/1.1.1'
Update to upstream version '1.1.1'
with Debian dir 0cf026eaa38c5409c44ee30b93baceabb98e82a7
commit 787d8a0ab17307bcf4ff1825e2f1d8118c4a3224
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Wed Jul 24 10:52:40 2024 +0200
d/changelog: generate entry for 1.1.0-2 unstable
New changelog entry.
Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>
commit 029b2fe5de4e93478eccc8d0f5a835542ee90455
Author: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Wed Jul 24 10:50:59 2024 +0200
nftables: add 000-upstream-cache-fix-revert.patch
Include an upstream patch that reverts a patch, to fix a cache problem.
See:
https://github.com/firewalld/firewalld/issues/1366
https://git.netfilter.org/nftables/patch/?id=93560d0117639c8685fc287128ab06dec9950fbd
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>