[PATCH 4/6] iptables: upgrade 1.8.11 -> 1.8.12

Andrej Kozemcak
2026-03-03T13:37:18Z

Changes:
- fix null dereference parsing bitwise operations.
- refuse to run under file capabilities, ie. getauxval(AT_SECURE).
- fix for all-zero mask on Big Endian in arptables-nft.
- support adding and replacing a rule in the same batch in iptables-nft.

- filter
-A FORWARD -m comment --comment "new rule being replaced"
-R FORWARD 1 -m comment --comment "new replacing rule"
COMMIT

- print -X in xtables-monitor command for base chains.
- remove incorrect libebt_redirect translations.
- translate bare '-m sctp' match to '-p sctp' just like TCP and UDP.
- support for info-request and info-reply icmp types.
- fix interface comparisons in `-C` commands in iptables-nft.
- several fixes for ip[6]tables-translate, the tool to ease migration
to nftables.
- document flush behaviour with --noflush for user-defined chains.

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
---
.../iptables/{iptables_1.8.11.bb => iptables_1.8.12.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-extended/iptables/{iptables_1.8.11.bb => iptables_1.8.12.bb} (98%)

diff --git a/meta/recipes-extended/iptables/iptables_1.8.11.bb b/meta/recipes-extended/iptables/iptables_1.8.12.bb
similarity index 98%
rename from meta/recipes-extended/iptables/iptables_1.8.11.bb
rename to meta/recipes-extended/iptables/iptables_1.8.12.bb
index 686dc5afe5..928930d08c 100644
--- a/meta/recipes-extended/iptables/iptables_1.8.11.bb
+++ b/meta/recipes-extended/iptables/iptables_1.8.12.bb
@@ -14,7 +14,7 @@ SRC_URI = "http://netfilter.org/projects/iptables/files/iptables-${PV}.tar.xz \
file://ip6tables.service \
file://ip6tables.rules \
"
-SRC_URI[sha256sum] = "d87303d55ef8c92bcad4dd3f978b26d272013642b029425775f5bad1009fe7b2"
+SRC_URI[sha256sum] = "8e7ee962601492de6503d171d4a948092ab18f89f111de72e3037c1f40cfb846"

SYSTEMD_SERVICE:${PN} = "\
iptables.service \
--
2.47.3