Bug 2211096

Summary: Rebase package onto libnftnl-1.2.2-1.el9
Product: Red Hat Enterprise Linux 8 Reporter: Phil Sutter <psutter>
Component: libnftnlAssignee: Phil Sutter <psutter>
Status: CLOSED ERRATA QA Contact: Tomas Dolezal <todoleza>
Severity: unspecified Docs Contact: Mayur Patil <maypatil>
Priority: unspecified    
Version: 8.9CC: maypatil, todoleza
Target Milestone: rcKeywords: Triaged
Target Release: 8.9   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: libnftnl-1.2.2-3.el8 Doc Type: Enhancement
Doc Text:
.The `libnftnl` package rebased to version 1.2.2 The Netlink API to the in-kernel `nf_tables` subsystem (`libnftnl`) package has been rebased. Notable changes and enhancements include: * Added features: ** Nesting of the `udata` attribute ** Resetting TCP options with the `exthdr` expression ** The `sdif` and `sdifname` meta keywords ** Support for a new attribute `NFTNL_CHAIN_FLAGS` in the `nftnl_chain` struct, to communicate flags between the kernel and user space. ** Support for the `nftnl_set` struct nftables sets backend to add expressions to sets and set elements. ** Comments to sets, tables, objects, and chains ** The `nftnl_table` struct now has an `NFTNL_TABLE_OWNER` attribute. Set this attribute to enable the kernel to communicate the owner to the user space. ** Readiness for incremental updates to flowtable device ** The `typeof` keyword related `nftnl_set udata` definitions ** The `chain` ID attribute ** The function to remove expressions from a rule ** A new `last` expression * Improved bitwise expressions: ** Newly added `op` and `data` attributes ** Left and right shifts ** Aligned with debug output of other expressions * Improved socket expressions: ** Added the `wildcard` attribute ** Support for cgroups v2 * Improved debug output: ** Included the `key_end` data register in set elements ** Dropped unused registers from `masq` and nat expressions ** Applied fix for verdict map elements ** Removed leftovers from dropped XML formatting ** Support for payload offset of inner header
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-11-14 15:51:01 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2211076    

Description Phil Sutter 2023-05-30 13:35:44 UTC
The minimum required version of libnftnl by rebased nftables (bug 2211076) is 1.2.2. Mentioned NVR is just that.

Comment 1 Phil Sutter 2023-05-30 14:46:44 UTC
Proposed changes here: https://gitlab.com/redhat/centos-stream/rpms/libnftnl/-/merge_requests/4

Comment 10 errata-xmlrpc 2023-11-14 15:51:01 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (libnftnl bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:7154