Fedora 17 Update: ipset-6.11-1.fc17

updates at fedoraproject.org updates at fedoraproject.org
Thu Apr 12 02:34:27 UTC 2012


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-4834
2012-03-28 19:33:35
--------------------------------------------------------------------------------

Name        : ipset
Product     : Fedora 17
Version     : 6.11
Release     : 1.fc17
URL         : http://ipset.netfilter.org/
Summary     : Manage Linux IP sets
Description :
IP sets are a framework inside the Linux 2.4.x and 2.6.x kernel, which can be
administered by the ipset utility. Depending on the type, currently an IP set
may store IP addresses, (TCP/UDP) port numbers or IP addresses with MAC
addresses in a way, which ensures lightning speed when matching an entry
against a set.

If you want to:
 - store multiple IP addresses or port numbers and match against the collection
   by iptables at one swoop;
 - dynamically update iptables rules against IP addresses or ports without
   performance penalty;
 - express complex IP address and ports based rulesets with one single iptables
   rule and benefit from the speed of IP sets
then ipset may be the proper tool for you.

--------------------------------------------------------------------------------
Update Information:

Update to the latest upstream release.

**New in version 6.11**

* Support hostnames and service names with dash
* Exceptions support added to hash:*net* types
* Log warning when a hash type of set gets full
* Set types moved into libipset library
* Library map file added in order to support library versioning
* doc: Linux 2.6.39 already has the defs (Jan Engelhardt)
* build: install libipset in the right place (Jan Engelhardt)
* Provide a pkgconfig file (Jan Engelhardt)
* build: make distcheck work and use POSIX mode for tarball generation (Jan Engelhardt)
* build: install libipset/linux_ip_set_list.h (Jan Engelhardt)
* build: include libipset/nfproto.h (Jan Engelhardt)
* build: process include/libipset/ (Jan Engelhardt)
* build: use AC_CONFIG_AUX_DIR and stash away tools (Jan Engelhardt)
* Update .gitignore (Jan Engelhardt)

**New in version 6.10**

* Tests added to check ICMP/ICMPv6 type/code parsing
* ICMP/ICMPv6 type/code parser bug fixed (bug reported by Sabitov)
* ipset: fix lookup of tcp port names (Stephen Hemminger)
* Optionally disable building the kernel module (Mathieu Bridon)
* Make tidy complete
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #786780 - ipset-6.11 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=786780
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update ipset' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list