Fedora 17 Update: iptables-1.4.14-2.fc17

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-10826
2012-07-19 08:32:01
--------------------------------------------------------------------------------

Name        : iptables
Product     : Fedora 17
Version     : 1.4.14
Release     : 2.fc17
URL         : http://www.netfilter.org/
Summary     : Tools for managing Linux kernel packet filtering capabilities
Description :
The iptables utility controls the network packet filtering code in the
Linux kernel. If you need to set up firewalls and/or IP masquerading,
you should install this package.

--------------------------------------------------------------------------------
Update Information:

- added fixrestore patch submitted to upstream by fryasu (nfbz#774) 
  (RHBZ#825796)
- new version 1.4.14
  - extensions: add IPv6 capable ECN match extension
  - extensions: add nfacct match
  - extensions: add rpfilter module
  - extensions: libxt_rateest: output all options in save hook
  - iptables: missing free() in function cache_add_entry()
  - iptables: missing free() in function delete_entry()
  - libiptc: fix retry path in TC_INIT
  - libiptc: Returns the position the entry was inserted
  - libipt_ULOG: fix --ulog-cprange
  - libxt_CT: add --timeout option
  - ip(6)tables-restore: make sure argv is NULL terminated
  - Revert "libiptc: Returns the position the entry was inserted"
  - src: mark newly opened fds as FD_CLOEXEC (close on exec)
  - tests: add rateest match rules
- dropped patch5 (cloexec), merged upstream

--------------------------------------------------------------------------------
ChangeLog:

* Wed Jul 18 2012 Thomas Woerner <twoerner at redhat.com> 1.4.14-2
- added fixrestore patch submitted to upstream by fryasu (nfbz#774) 
  (RHBZ#825796)
* Wed Jul 18 2012 Thomas Woerner <twoerner at redhat.com> 1.4.14-1
- new version 1.4.14
  - extensions: add IPv6 capable ECN match extension
  - extensions: add nfacct match
  - extensions: add rpfilter module
  - extensions: libxt_rateest: output all options in save hook
  - iptables: missing free() in function cache_add_entry()
  - iptables: missing free() in function delete_entry()
  - libiptc: fix retry path in TC_INIT
  - libiptc: Returns the position the entry was inserted
  - libipt_ULOG: fix --ulog-cprange
  - libxt_CT: add --timeout option
  - ip(6)tables-restore: make sure argv is NULL terminated
  - Revert "libiptc: Returns the position the entry was inserted"
  - src: mark newly opened fds as FD_CLOEXEC (close on exec)
  - tests: add rateest match rules
- dropped patch5 (cloexec), merged upstream
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #825796 - Wrong parameter passing for iptables -j LOG --log-prefix
        https://bugzilla.redhat.com/show_bug.cgi?id=825796
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update iptables' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------