ipset-7.15-150400.12.3.2 >
A c{Hvp9|C }~P#s*a#.7I؉cmUR?*y$ ܙtP^]ʕ,v-YuaN)^u
6 `5)LXs!IAU.bqbX'. R &/ZeQt Ϙh n_ތM,6ɼE\iy'XJ yZgG1b? G3RqQo>A)A=lBmw?:P^ R蕰&q[ Pra8Qc9f32ab376c994b1eeb4b07041b2bc3a1987d79f c08a1675adbbbf48911e362edd36ef123e7f90c26996a90155dfc69366522ee3 j c{Hvp9|"Ed>03*U|\n N"lg.K0n.-ad;bF Nɮ5fQE
Y\kw3ShaxPCUύ !d<4aB,BaI [1C<]晁& I!|Lrt&&9DuI/dqC}" zSMxbv^ hjb$" Gd1/eQ/vdgj
$75 n q:OPی2# ЖKm 9 T > p > %x ? %h d
B 1 R o u |
0 D X
( 8 9 8 : ( F G ! H !$ I !8 X !@ Y !H \ !p ] ! ^ ! b ! c " d #& e #+ f #. l #0 u #D v #X w $ x $ y $ z % % % %" %d C ipset 7.15 150400.12.3.2 Netfilter ipset administration utility IP sets are a framework inside the Linux kernel, which can be
administered by the ipset utility. Depending on the type, currently
an IP set may store IP addresses, (TCP/UDP) port numbers or IP
addresses with MAC addresses in a way, which ensures lightning speed
when matching an entry against a set.
ipset can:
* store multiple IP addresses or port numbers and match against the
collection by iptables in one swoop;
* dynamically update iptables rules against IP addresses or ports
without performance penalty;
* express complex IP address and ports based rulesets with one single
iptables rule and benefit from the speed of IP sets c{H@sheep72 QQSUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ Productivity/Networking/Security https://ipset.netfilter.org/ linux x86_64 . p ) c{H?c{H@c{H?c{H?c{H?57e231af9d01593d4aadc354af323a5a07545fcad1621b785c8caed1f2079cf5 7ac7e04c1bd2633bd826bbb3767cfc63a511473cd85ab183996caf29c5d10433 49647884acfef0b95ca8488ce63db9871406619374725b699ec15489344fed25 6100a800367d8d72ce3886fd2cfe93c332c1de8b6a02fe468afbb5dd2800d8b3 ipset root root root root root root root root root root ipset-7.15-150400.12.3.2.src.rpm ipset ipset(x86-64) @ @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libipset.so.13()(64bit) libipset.so.13(LIBIPSET_2.0)(64bit) libipset.so.13(LIBIPSET_4.11)(64bit) libipset.so.13(LIBIPSET_4.8)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 cda
@aF`/@_<_^@^S^g@] @]Z@\F@\[@[GZ̧@Z@Ze@ZP@YLYcYXXVJVVU@U@Ts danilo.spinella@suse.com info@paolostivanin.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de suse+build@de-korte.org jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de kstreitova@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de jengelh@inai.de kstreitova@suse.com jengelh@inai.de jengelh@inai.de jengelh@inai.de - Tumbleweed is not affected by the following SLE issues:
bsc#1122853 - Update to release 7.15
* netfilter: ipset: Fix maximal range check in
hash_ipportnet4_uadt() - Update to release 7.14
* Allow specifying protocols by number
* Limit the maximum range of consecutive elements to add/delete - Update to release 7.11
* Argument parsing buffer overflow in ipset_parse_argv fixed - Update to release 7.10
* Fix shift-out-of-bounds in htable_bits() - Update to release 7.9
* Enable memory accounting for ipset allocations
* Expose the initval hash parameter to userspace
* Add bucketsize parameter to all hash types
* Support the -exist flag with the destroy command - Update to release 7.6
* Add checking system_power_efficient_wq in the source tree. - Update to release 7.5
* netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
is present.
* netfilter: xt_set: Do not restrict --map-set to the
mangle table. - Update to release 7.4
* Wildcard support for the "hash:net,iface" type. - Update to new upstream release 7.3
* Fix rename concurrency with listing, which can result broken
list/save results.
* ipset: Copy the right MAC address in bitmap:ip,mac and
hash:ip,mac sets.
* ipset: Actually allow destination MAC address for hash:ip,mac
sets too. - Update to new upstream release 7.2
* ipset: Fix memory accounting for hash types on resize - Update to new upstream release 7.1
* Correct the manpage about the sort option
* Implement sorting for hash types in the ipset tool
* Fix to list/save into file specified by option
- Remove ipset-file.diff (merged) - Add ipset-file.diff [boo#1116432]. - Update to new upstream release 7.0
* A new internal protocol version between the kernel and
userspace is used. This is required in order to support two
new functions and the extendend LIST operation, which makes
possible to run ipset in every case entirely over netlink,
without the need to use getsockopt().
* The userspace library was reworked so it can be embedded
without calling the binary. - Update to new upstream release 6.38
* Fix parsing service names for ports. - Update to new upstream release 6.36
* Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged) - Add 0001-build-do-install-libipset-args.h.patch [boo#1077037]. - Update to new upstream release 6.35
* Userspace revision handling is reworked
* Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
* Missing nfnl_lock()/nfnl_unlock() is added to
ip_set_net_exit()
* netfilter: ipset: add resched points during set listing
* Fix "don't update counters" mode when counters used at the
matching
* netfilter: ipset: Fix race between dump and swap - Update to new upstream release 6.34
* Reset state after a command failed, when multiple ones
are issued.
* Handle padding attribute properly in userspace.
* Test to check the fix to add an IPv4 range containing more
than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged) - Update to new upstream release 6.33
* Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff - fix build for Factory - Update to new upstream release 6.31
* ipset: avoid kernel null pointer exception in ipset list:set
* fix bug: sometimes valid entries in hash:* types of sets were
evicted
- Update to new upstream release 6.32
* fix possible truncated output in ipset output buffer handling - Update to new upstream release 6.30
* hash:ipmac type support added to ipset - Update to new upstream release 6.29
* Fix race condition in ipset save, swap and delete - Update to new upstream release 6.28
* Test added to check 0.0.0.0/0,iface to be matched in
hash:net,iface type
* Check IPSET_ATTR_ETHER netlink attribute length
* Fix set:list type crash when flush/dump set in parallel
* Allow a 0 netmask with hash_netiface type
- Restore unreviewed deletion of KMP production,
undo spec-cleaner refucktoring
- Add ipset-destdir.diff - update to 6.27:
* kernel part changes
* fix reported memory size for hash:* types
* fix hash type expire: release empty hash bucket block
* fix hash type expiration: incorrect index fixed
* collapse same condition body to a single one
* fix extension alignment
* compatibility: include linux/export.h when needed
* compatibility: make sure vmalloc.h is included for kvfree()
* compatibility: Fix detecting 'struct net' in 'struct tcf_ematch'
* compatibility: Protect definition of RCU_INIT_POINTER in
compatibility header file
* netfilter: ipset: Fix sleeping memory allocation in atomic
context (Nikolay Borisov)
* userspace changes
* handle uint64_t alignment issue in ipset tool
- disable KMP build as we support the in-kernel version instead.
Remove ipset-preamble file that is no longer needed [bsc#962345]
- run spec-cleaner - Update to new upstream release 6.26
* Out of bound access in hash:net* types fixed
* Make struct htype per ipset family
* Optimize hash creation routine - Update to new upstream release 6.25.1
* Add element count to all set types header
* Add element count to hash headers
* Support linking libipset to C++ programs
* When a single set is destroyed, make sure it cannot
be grabbed by dump
* Check CIDR value only when attribute is given
* Permit CIDR equal to the host address CIDR in IPv6 - Update to new upstream release 6.24
* Alignment problem between 64bit kernel 32bit userspace fixed
* Potential read beyond the end of buffer resolved
* Fix parallel resizing and listing of the same set
* Introduce RCU in all set types instead of rwlock per set
* Remove rbtree from hash:net,iface in order to run under RCU
* Explicitly add padding elements to hash:net,net and
hash:net,port,net
* Allocate the proper size of memory when /0 networks are supported
* Simplify cidr handling for hash:*net* types
* Indicate when /0 networks are supported sheep72 1669023808 7.15-150400.12.3.2 7.15-150400.12.3.2 ipset ipset-translate libipset.3.gz ipset-translate.8.gz ipset.8.gz /usr/sbin/ /usr/share/man/man3/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:26921/SUSE_SLE-15-SP4_Update/4cdc91a9e9cb4cd469ecf1bebf01ce46-ipset.SUSE_SLE-15-SP4_Update cpio xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=971d78e8a60a022fb7ce877043378aed46498c9d, for GNU/Linux 3.2.0, stripped C source, ASCII text (gzip compressed data, max compression, from Unix) troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R R l7 utf-8 1375544b6092194aa649a3593f2611ae848f2c6bf07bc942910a960fec3e0338 ? 7zXZ
! t/T@]
crv9wvO "rfJ ƴެ㖚&dCEuÞ/YF1yĮg2{_~p_5ʃZMf7.icֺY#1*>~Y&=C
>\/[XLc; }H+;ԑɩ*z eє!IzfW 4 GKS&Z OA~W1( i!/Hh8Kn7Ɩ9z) iB.9C:Y $RħkyC*Ažb1Uʴ/O<S͝ #逋ДOp3?_iKE!)Tt ԒcڠA摁Dj#Rؒ,JB
%'yݨYb$ @c pϋ}(,`9Be0PSGB \q}NlMM`A#5Î TO!| j yq%
[4$"ɝe p07E
iʏ+x~ǟ]w}B́7˕ho}wlܗ07]Sޯ+ֺ9QJ<)]$krJY;b ]4HS*gw Wvky$A)5Arr#(ӌW~RNq:bj?.6gVj9ݻ*u5]E~J!tա]> _Q5c@Sx{ 7yL.P}O :DV=gv/)AY ?JڋqԶNa^H +id{P ӦZy8dѫM#$L}w" $C"8F0g%_ KrVk ^
dxD DPA=&1ʩgKr`"ě.<3-K
8L3!&ͲO
0 /H6M%ΠXZ̔dF2b^[ :y'T1c}_AOz`
]Ij
d~dzq
8Urrl߽2jZ#P AD^B ]I˙-t \o c #ÿNqE04 Fe*# U_#?P}t>!ʄMwqq%
F
j#Du՜۷B!e߸k=Dإ7E'86$vC Kج·jPx1JRor^ѠdG;{fZ[.'\&|*zIP<3y"&Ƃo :`LAW9iVEpȲe -3+ )u)$ۉS_7OW6 %b _ď}GRNiTΓO~\V۞FPbs 2`ƭF-X=m[}0!sPǗljq\q!a]^ͳ)⌍7_mr옰"
Er&Z"T?X>EZJ! a$WMx!¾)>bzɖr,O\+tb (TK*.fFǍ
YR=pZnHٓ/նG^@[r;Νck/+| X)NMɾ`!eT4B G?^tIHzZ
'hhǼ ͞?dScYrQIܦ8| A<87:LN
Fo
,'L`A4 {|W^g!NI3@70n*L
לYnR kqL)+8 ^( t-(:p,& #u߰' OtOi
ڂ1lbWrO:$T\N\hwa# `ɝ<ԼO5k
Md#rTw5 =7fEJ5-zPeē$f}wp=pɴ= qC9Vh Jd 8LunI/tn>Lxi&J|d:JgדکRJ j8j {
" @Г c0E,arp v7z/iO84+}isPqGDpC1[RN p7 FbYo(ua/Nձc'ʩ < Q&eaLvu?O{ba+rKeR|Y,w2SeB>$V)tC6w:cס?nb0*HV Qrbўy_.!!
#O5_2c*)ُ{K:u/ػe`߲= S0ӂ/ej CҙAo?1CgrDUB G1
ShauMFu`{ّCk:PEc(Y[ D$ $!
N-q-i26
Ym4zNγ@
, s+ۏ̈́^Nl/ +E9ޜ+g!Ø} 8{Qb' 8֞Ra,e 4?g&X;F[Mb>P;`n-Gpq84 b;ٻ#{3| MCBjDH":"CM ,·^m|d$p5ϔYQn NԖp_l$֠5%5FSPVYر}$JgZTsfBȨ]ƄP7hX^e(D< gg-vH{[EhN^/3*1DfQb49 Ym|ס3n5x~1LVrUx>l`U P*+ @zJ5ʵz]؆X^b
]r6I>4X\déyԹu7Ki#q*'&g:P{?轳SN$k7 R [R >0#a1 w5Y>ӐuȠ,_E|o*k?dHMIm: '?9^O\PY n0ə*; v8]Y(#mo8,zݟ_WzwE VkXSJoR)큿 Z`" l)&ܮ6K'C{twLh~s WBX$; 4i2blK^ 5q> hv8!` "Spcs2P/Lկb9; ʓ 77B&:dgOz=1dZY1; +zOλom[ P6m+ª?3%V
%rv ['N1m t7AIO@pVG] ?d.N=d5CY lGr x]fڸvv/)>NMu2$4lN3e( x+
8;sEKAΗ|G&5 T e5Tdy}-) yJzj P\~%/5|s
i,E:DG[r2M heC?&V;wFQ_hݔSLK`pUV]4* . Li8Jʢ7ߗ?qꭽȅA9#\%X& 'NVNy}aVtr:쨓_8̆?YtѨEH&peT!5deAJEh-"m+ƚ2^ER>IɄgPq]k7v }lg.6ƻFt@xKGvjpCG; 7JN S+"; eV}P>O4kQ.Q)Oނz;E 7
~,t!6֠f 4FT#w8&?H2`*3sؼq#RCs**1$H
4)7̼`iQu<ܫ:x qG @%oޖ3V; =mq IUN/K{i)"vn啄DzI"[)+D hw$)b|R#^ hrVHÈk̸ (?2('@-SsGtu5SoD=1@ r(P Rh iחBd5Q$6j-o O [R>\k2fkaǻ&!^Y(Sh 4(W3-ՉgPl.SƧ`
]l}J\ ho1 {hoɂmOhV)X{+A?Ú<9n99g$ZⓉbr%\{D|n=% DkD874X!'rlxv 5{+da4 r J 5}ntkasaM
h-SoڤCrߴxύeҧ>zy m睅m(ڛR-wvKcnO?gѯ A ' zW3jS`kd ?[Y| Nq ȆɮvRR~r
'}zy⺘qgZ`mMªﯓq :G)]ӑ <ؖ:t-Gz 0s$@$3, ?
"%lȆ?,ŧlgB~mY/K mV Rn lb N@L*oX.4$vɭ
Z)(/5Uȣ_Fs3 /40z'NJ>miPVbǔIog3<*f9 \{jֆ 9NG Ѣ&K9 t22pJ
f25Y;3/U~"LG/$נ2Ybws:' KGamRαl v@Xo$Pdr67 E4y0x,ԁ 2aOo2=ĩd6I*]w⭈&fQ-4g)"D hѤh%B {o|hCk>JȌ'O21DX
.dCN~OFQD
-
DL6Ua9A NU2EJJg>h
ڗW
z@ r VcC;R)ˊPCjO2<02R8<( ByoeMnd5NBHC?V\`ŧ{] L%ml}U$M
1bk,` ^LMDQ52*{
2WE ~`Il[Go{&C~1N
.lZn[[vadVQ2*tk%`Pj!9C?Z(
Q-saV0ah}Qo@SRE[EgJ\(Yk}JvFt $WPtԙn!S?!7aճw?oU禒80!R,8 hV*pPf= @Z˸@ma[3n_bE2]k/IccBws?!|Pe t ~vkt}<D nU:t"ڴbvj2;ǡ%WGJ9F79
&/6 %EXOH2
7zp{%ay[('e|dP \2 ,tw?! _ (Q-6?D R QbM"z!$bRc ~%M7`
ԋV"B٬ $M,@E[SI/mr1h{93 wUYh:/N=HHPPax FzS0B q'HӐ 0}>{#)*~OT0
l8hJ<& ^ӹ(*,߯3#e 捍x h 7YD)ûu[ J1n>c % Q
P*FRx7Ʃ5
E`s#mPd|hR)D66Y(*
ɘ#Pݨ^zS~IjHX1 g@;ʅn*K/c;ɏ6CGUaw¯F6x29;*l5#K:BuKQtː6 qW roX1hJ(:emB*U%q$͢nx!(7#D 5>sJِFɃ[QJ~oϡ{,YiJE] n Fq (Z8 ͖ ϏƋw]u^D+5(xmFxr txjp
!lXD+ l]*5pwUM 7NZӱs%@ DEw A]n[ N:3#1
a]g
┻U3P-AA9cztcmH(7CeVB
AX*荢gNc %1q˛,%I#" ۭ`Z^QiczvlA4n9;Sq5ٶq|"ִfŲ0E`.t 7 @8k$ ImSlc 8qWgK ΰU-G?ZIy O py)rZ:|ha _ǻd
zWVw 52@>
DgBp3LQ
[֤W_ H8*'\0b33\ꇬr6Zfjޠkm*~{{^6kL#=l35,CGWo'b7<]
ϹD cw!qoI~b E-MOc @чhTd#xc6 +6ͦXWf k;9,F9G̭&x/ ojYwZNm/ C+I6-dNi~=kSՄ + r_&6s]qN/ݒn@PoWK
$E l9Q3
#O* f?, l{^[G⧜W^0DFVQI:rxqA-̜Z}p72*h) L0V5$홬cU]3ub[>&]n3u 0sG }[ f7hjG;&~gDx$1 '_ in.w#˼9l1ӏkΗ/o_SEY~Y{ `)5
_s IJ2cQ5m"8X7DZ 2EFh*1A _& < a~-Ө|
_x ;Fx|+ŵ5\ eݤW
¨ D
O wڛ ʨ).2^tdtg!/ Zj
T:zv\<]9 FMYĭ@¸fχ̫ 5#FQ2&yOL8Q\9^6#zv{
tq˖g _Lqxim*ɪƞ^:b
qࠝ_Ǜ)v M_S18 :Z.uDȸ V`[
ٓ9gmQ-! goJLؠCW+؍t,ӤЫzyt n_b; "*s0Y r"x v42C/bt}wBjY9HdqN:_
̶ϢcXSw.sO'C%p+0 ˀlfhaSڒ;,UإR[ 0 h=k^!=`
[k}%3|z~B3B9WwzTp&MMEne^ 0 < ~wL
QΑxԆvϢ&7džN- Ӳ{Z7lwCJGFcxB9q:3%\EJ$S&:ILa = 'H
?^ǃ[ v$k";Hqob -+R糩Iu{ °_ E/.ktl֤WC *s
ۦҐd ^V( _Gy,I?_ 9Wػ\U☚Wz4=BL XE
P\ղ!wc3F VE(5 I}90Պhđs~ъ#> ^Μl'ώw3m&hF{TF+4C<1 45{ ~%(]-N#s%@֗^ۼP3e;fD3Fct8.`L7Aˑ>6ý3Dx
B4
bXYt%9!8:`E<-SucWA|o 1-G+*g\:͘B/l* =ăvl~E8=
qU]47[:fju%DY60c!"fc!a [XqFe%%ns1uUl6n~ ,_蟼Y-t39r`.UFzCSAwm/l %gN26Ԥ&J+OQm
*+uE (G*^n+oqt|_{'h6)7ӘݯZәl}Q\OH6yԧC띂 )S5CuilV@ݙW ۃoIUB/-e㪯70>o{ qXUS#6J ~F$ L~rFB+Tќ,CӤp}:Pr*=ӕ,YJv Kb6y*Ӫ3y.-܃"bÞϡp>&:+' ,|VFyJw
n
=p2}
i{zC^j,M"SIM= "d#KVDU$g@硠u `02D[ x>۩}Vs GtxlnzO\js9[+gzUizJ=
> A7QH#q^fU˕wxvգ& IrN}|`9Xt.w tLĽV"h6uWB rQ:\LKW3VΕS~Ip{ zdxhv@LaiNEmnĽ"Oɜ߉
BR=* ;zAX$;N@K ~kkپP",x6zs❆aoBG*ћ ?.+,IV%A-+Hfq EP d .f A|VBy{zE.-BTM-/ZuHdFWHeޞ뵸~?7$U/b=C2} 5qʧ6\~*YZ4{BJ-Y./QJО^ Yѱ@EyEIi ̤·zT2{Tt$Yέ1食(p }ɸuZt{յ^HDNН@; Ḿ-Vϣ: &/VGР{~3 a m6F-D 7M("BQg[
L uP4=˕4qmS2u-\=R1B}Y&/Ͼ RRB&5; ˾IFJ6 YzS")FMd#f8z سY]pL"g/i95ίȾ2Bͺ
N_mpj'[6CȒJwB7\O2~PhdU6OO KDӋU.AB4;I J6%<=WjJѐ7詤ZIR& 0~GPCcwgl'g0l+kY*aB#gjpi U(H;k.-oO#і8h+OHM aɰqgNZA䟉\w(el1@G)@ObZ;Q", OGׅ]bgģPcU̖ " #ýh4<@H^[A.ے6_Yܰ8^-ksnjIcJc%'.Ş)Q2\=':nu0k Aql\ҾU/ǘG25/zb/Mݨ,ǦnXD /AnwK04?/]=ҵi^ho^ЭIaS jv(b-BAR&zt4% Pq< ͞њ4Fju1pQ ܵ(҉m):@\/jcB-KPr Gx"%Hreȼk9ƣH|
iuCϳifIs'=bKWCW`˓̓pY
//}ǭ=dе3Cy~pi0#f ngr7̝
Be't۸+@l1Cd4yECL@̝# wu}LFK&F~p6'^jzk
L ն@ 20l>hoY|S6 ?X00U!bCWoD`P!)q RgY5gggR%X"}K."L]=IHAaȻ#r人![ZϺS\bP
X^!̳)11@5E@dCWu&|ЃDDB0=L!f8Q܂]AsR͂@|z7dWM'BXz. ʹ iMa#$ 2i 66
YZ