libipq0-1.8.7-1.1 >  A `pOp9|?%=B9=LjqXuR*ֵbUGV+3ΆZM CL~7lM:/ $b`/GASb6 ݔ)0?)c>s@6xE6|poU-J:(0\ր.nzÊL$=YY>;Źo 7^u \il6|SQ緀"2;XJ5*Iג1=Gp6u/d470f98bb2f306c32c74c7c7872324f7e5d811d1eb568750a8f9b1338f8a8a01342c57d673a8efc5b8e6cc54415c362b243e5d37.``pOp9|/{mGUԯ[~F;,q8 mБWkb&<| Z)#=w^݃CkDǩg#wxx`J3]{ #Sq 8g=P1N8SxnASOn\;ޠ 7Wɋp@?d   R6T j{      (2<X`   (894:>@FG HIX Y,\D]L^hbtcdwe|fluvw0x8y@zTdhnClibipq01.8.71.1Library to interface with the (old) ip_queue kernel mechanismThe Netfilter project provides a mechanism (ip_queue) for passing packets out of the stack for queueing to userspace, then receiving these packets back into the kernel with a verdict specifying what to do with the packets (such as ACCEPT or DROP). These packets may also be modified in userspace prior to reinjection back into the kernel. ip_queue/libipq is obsoleted by nf_queue/libnetfilter_queue!`pibs-centriq-3 PSUSE Linux Enterprise 15SUSE LLC GPL-2.0-only AND Artistic-2.0https://www.suse.com/System/Librarieshttps://netfilter.org/projects/iptables/linuxaarch64 P`p`p3c541adb402f205aba64b0f902d3eb46e9bbf54be0536ada285437b07603cdb9libipq.so.0.0.0rootrootrootrootiptables-1.8.7-1.1.src.rpmlibipq.so.0()(64bit)libipq0libipq0(aarch-64)@@@@    /sbin/ldconfig/sbin/ldconfigld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1`_@^א]]@]rJ@\"\9\[[ @[[s[CN@[@ZkZZu@YK@X6@Vs@VRjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dekstreitova@suse.comkstreitova@suse.comjengelh@inai.dejengelh@inai.dekstreitova@suse.comjengelh@inai.dejengelh@inai.deastieger@suse.commchandras@suse.dejengelh@inai.dekukuk@suse.dematthias.gerstner@suse.commatthias.gerstner@suse.comjengelh@inai.dematthias.gerstner@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.de- Update to release 1.8.7 * iptables-nft: * Improved performance when matching on IP/MAC address prefixes if the prefix is byte-aligned. In ideal cases, this doubles packet processing performance. * Dump user-defined chains in lexical order. This way ruleset dumps become stable and easily comparable. * Avoid pointless table/chain creation. For instance, `iptables-nft -L` no longer creates missing base-chains.- Update to release 1.8.6 * iptables-nft had pointlessly added "bitwise" expressions to each IP address match, needlessly slowing down run-time performance (by 50% in worst cases). * iptables-nft-restore: Support basechain policy value of "-" (indicating to not change the chain's policy). * nft-translte: Fix translation of ICMP type "any" match.- Update to release 1.8.5 * IDLETIMER: Add alarm timer option * nft: CT: add translation for NOTRACK - Drop iptables-apply-mktemp-fix.patch (seemingly applied)- Update to release 1.8.4 * Fix for wrong counter format in `ebtables-nft-save -c` output. * Print typical iptables-save comments in arptables- and ebtables-save, too. * xt_owner: add --suppl-groups option * Remove support for /etc/xtables.conf * Restore support for "-4" and "-6" options in rule lines.- Add Conflicts with iptables-nft = 1.6.2 as during the update to iptables 1.8 ip6tables-restore-translate, ip6tables-translate, iptables-restore-translate and iptables-translate were moved from iptables-nft subpackage (now iptables-backend-nft) to the main package. So we need to add a conflict here otherwise we hit file conflicts error during the update.- add missing Provides/Obsoletes for the renamed package iptables-backend-nft (was iptables-nft)- Update to new upstream release 1.8.3 * ebtables: Fix rule listing with counters * ebtables-nft: Support user-defined chain policies - Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch 0001-include-fix-build-with-kernel-headers-before-4.2.patch (upstreamed)- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch, 0001-include-extend-the-headers-conflict-workaround-to-in.patch to fix build with older linux-glibc-devel. [boo#1132821]- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation where 'iptables -L' reads garbage from the struct as the kernel never filled it in the bugged case. This can lead to issues like mapping a few TiB of memory [bsc#1106751].- Update to new upstream release 1.8.2 * Fix incorrect handling of various targets and options in iptables-nft,ebtables-nft,arptables-nft.- Update to new upstream release 1.8.1 * New cgroup match revision with reduced memory footprint- note build-time dependency on libnftnl >= 1.1.1- Add missing update-alternatives dependency to Requires(post) section. If this is missing the package fails to install properly when it is used as build dependency.- Update to new upstream release 1.8.0 and snapshot 1.8.0.g75 * The ipv6 "srh" match can now match previous/next/last sid * CONNMARK target now supports bit-shifting for restore,set and save-mark. * DNAT now supports shifted portmap ranges. * iptables now comes in two backends: legacy and nft.- Use %license instead of %doc [bsc#1082318]- Fix ethertypes ownership, should be %exclude, not %ghost.- Resolve conflict with ebtables and obtain ethertypes from new netcfg minor version. FATE#320520- Update to new upstream release 1.6.2 * add support for the "srh" match * add randomize-full for the "MASQUERADE" target * add rate match mode to the "hashlimit" match- Add iptables-batch-lock.patch: Fix a locking issue of iptables-batch which can cause it to spuriously fail when other programs modify the iptables rules in parallel (bnc#1045130). This can especially affect SuSEfirewall2 during startup.- Update to new upstream release 1.6.1 * add support for hashlimit rev 2 for higher pps rates * add support for cgroup2 path matching * translation program for nft- Update to final release 1.6.0 * Only a build fix, no new significant changes.- Update to new snapshot v1.4.21-367-g9763347 [1.6.0~] * -m ah/esp/rt: restore matching "any SPI id" by default (they unexpectedly defaulted to --spi 0 rather than --spi ALL) * -m cgroup: new module * -m dst: make ! --dst-len work * -m ipcomp: new module * -m socket: add --restore-skmark option * -j CT: add support for new zone options * -j REJECT: add missing ICMPv6 codes * -j TEE: make it possible to delete rules with -D ... -j * -j SNAT/DNAT: add randomize-full support/sbin/ldconfig/sbin/ldconfigibs-centriq-3 16179573211.8.7-1.11.8.7-1.1libipq.so.0libipq.so.0.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/72499241369ed9e387d77110c1a200d9-iptablescpioxz5aarch64-suse-linuxELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=23f84f2da776dd9e517e3695c96234d91d867323, strippedPRRRR޶])utf-858722a932fb4200520bdaab06cac4df06e83a49145932e66aeb806af36cbcc8f?7zXZ !t/ 3] cr$x#x:Lwv2?]H环E{%6@* 3, \?9]8;Bv$A&JحǠ hӼT9+ "!Bض(j޷)h.f%4zw&4QUVޗN )ZVSm.ghr|fLǫ|.~NrkQ'IvK{9E, k |Ĝ2l wX!>x C}Ըn8іy=(+jO0@"4/yDn,մvW؅zLPQjC9w⟣O8t$zIt  -u =zw$k ;NUd-$6x?ֲxg m‡ D<ۺ'3%̝41?=đg `%&Jfۿо`SNE66mr}}Q nc'Vj4!2y; )}N>&|x>hG{ ⍀&ZKDzˈt0 |@O'{o]ŕPr\״$>f*qV 6ͮ,('Wɔ]O.YR؃׆]#k .t80E"$)ʿ5=N0|+?P;^h5ZlsO,;Cvɧ&/%*m窝NC6u@y`q=pO'2{U jN~}0 D1$nmk +1);C~5zTI.3[9X(f!jp, C HrJ.9rB)-y:6Yț5hJ{'M_߱{g\1r ).]Gi}1٥=m@IGpɬpWmy-$!7"N"RSB7ꥴ  XO/X͟Qn5 x|7(vJ=?ڳ[D~ZhY1*?.X Sy05^) JG?;ÝXT~ij(Ii .ddC@~&؋w*%c(u0!-%+eѳ^c'!qVutfC;Ԅ> Wa2kghi{@[>f"-}[ϻ#]n{cdҀ]2̧BB)* c4T=p L`zۥt*u mFN@n?i+a:Z1bX< !l.x%dybNXhrI1n:dcT*,j`?ʈGVoZlHyM[mwZ jTt)shLN d󴭧X24_q."i=FRX"j;Ān#3l*@󸵑׍I>lDs^9Q(WdFRJόpDS!i4-LnmZ:6, -dGƚhPb> T^~ؗhsyR#\8v]Sn HnYġ6?֕pF˅nrIwU ʀ0C΋O1fwLA3T2Sm z4NqÚ# Ձ{2,_csҶ$`ytFf8,;D򑏶zdn錩7&+'PDf,}=_Np<%^ =+(6(8UܜަbR'rtMoZu:ފ%JqlT;Db %{;*Ȅ y^Ƿ |z%0΀e(0mS%cWnxN,L-i<i଼c43||̉IbJ%JgfW{C8$wEx)ϛO_Mu;tIǟWPE fd,(3)ͦ<8=}pG-k|?Jd㢓\cKc*2>7R\^fdDs{?q؀ݝ߰|\@7\,a7/j рrͻ3^{n\z tOmN/S̩ Fg>#YA^ pJU޸cIŭryսmMK~6,WF1 rh/r)u57Y{ "mZeh @n8%@G53Lv%jdXMh$jH^M×+v6o;[GK­-@ 4#,8AE1r9èz3Y^UR~SP=J/P6?s޷qӹ\|~i+1T.'{\r-{ecYZHH N&M )4it.}!Q<\c N#МcVQhц}/FQO?.WPRi2lvR@\@.H+*Ddcg7Qy-{gŠ/vxd#P1iS[/-u*rJYD+Wڹ%u\]J ~`dzOr(Jܫy ɂc^}q,3֣,t YZ