Bug 243092 – net-firewall/ipset-2.4.2 bump request

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Krzysztof Olędzki 2008-10-21 19:01:19 UTC]

2.4

    * Userspace changes
          o Added KBUILD_OUTPUT support (Sven Wegener)
          o Fix memory leak in ipset_iptreemap (Sven Wegener)
          o Fix multiple compiler warnings (Sven Wegener)
          o ipportiphash, ipportnethash and setlist types added
          o binding marked as deprecated functionality
          o element separator token changed to ',' in anticipating IPv6 addresses, old separator tokens are still supported
          o unnecessary includes removed
          o ipset does not try to resolve IP addresses when listing the content of sets (default changed)
          o manpage updated 
    * Kernel part changes
          o ipportiphash, ipportnethash and setlist types added
          o set type modules reworked to avoid code duplication as much as possible, code unification macros
          o expand_macros Makefile target added to help debugging code unification macros
          o ip_set_addip_kernel and ip_set_delip_kernel changed from void to int, __ip_set_get_byname and __ip_set_put_byid added for the sake of setlist type
          o unnecessary includes removed
          o compatibility fix for kernels >= 2.6.27: semaphore.h was moved from asm/ to linux/ (James King)

[Comment 1 Krzysztof Olędzki 2008-10-21 21:33:22 UTC]

Please hold, it seems that a new bugfix version is going to be released soon.

[Comment 2 Krzysztof Olędzki 2008-10-23 17:48:35 UTC]

# 2.4.2

    * Kernel part changes
          o When flushing a nethash/ipportnethash type of set, it can lead to a kernel crash due to a wrong type declaration, bug reported by Krzysztof Oledzki.
          o iptree and iptreemap types require the header file linux/timer.h, also reported by Krzysztof Oledzki. 

# 2.4.1

    * Userspace changes
          o macipmap type reported misleading deprecated separator tokens and printed the old one at listing set elements; the warning contained misprinting as well (bugs reported by Krzysztof Oledzki)
          o Warn only once about deprecated separator tokens in restore mode. 
    * Kernel part changes
          o Zero-valued element are not acceptable by hash type of sets because we cannot make a difference between a zero-valued element and not-set element. Enforce it, as manpage says. (fixes bugzilla id 543) 

[Comment 3 Robin Johnson 2008-10-24 21:28:28 UTC]

In CVS now.

Please note for upstream that they accidently dropped the glibc2.8 fixes of limit.h, I had to re-add as a patch.

[Comment 4 Krzysztof Olędzki 2008-10-24 21:57:09 UTC]

(In reply to comment #3)
> In CVS now.
> 
> Please note for upstream that they accidently dropped the glibc2.8 fixes of
> limit.h, I had to re-add as a patch.

Thank you for the information. I forwarded it to the upstream.

[Comment 5 Krzysztof Olędzki 2008-10-25 13:24:22 UTC]

(In reply to comment #3)
> In CVS now.
> 
> Please note for upstream that they accidently dropped the glibc2.8 fixes of
> limit.h, I had to re-add as a patch.
> 

Fixed.

http://ipset.netfilter.org/changelog.html:

2.4.3

    * Userspace changes
          o Include file <limits.h> was missing from userspace set type modules, reported by Krzysztof Oledzki and Sven Wegener.