[ptxdist] [PATCH v2 0/2] netfilter: version bumps (libnftl 1.3.2, nftables 1.1.7)

[ptxdist] [PATCH v2 0/2] netfilter: version bumps (libnftl 1.3.2, nftables 1.1.7)

[Alexander Dahl via ptxdist]

New release, new nftables configure options.  See notes on that patch.
Briefly tested on armv5te target.

Greets
Alex

v2:
- added Sob trailers

Alexander Dahl (2):
  libnftnl: version bump 1.3.1 -> 1.3.2
  nftables: version bump 1.1.6 -> 1.1.7

 rules/libnftnl.make | 4 ++--
 rules/nftables.make | 6 ++++--
 2 files changed, 6 insertions(+), 4 deletions(-)


base-commit: deecb91874f09aa7e6258ba94509ade70c8b41ba
-- 
2.47.3

[ptxdist] [PATCH v2 1/2] libnftnl: version bump 1.3.1 -> 1.3.2

[Alexander Dahl via ptxdist]

>From the release announcement:

> This release contains:
>
> - Support for connlimit stateful objects
> - Fix compilation of examples for musl libc
> - Validate geneve class and type attribute size in setter
> - Validate kernel does not provide too long geneve data attribute
> - Remove internal nftnl_set{,_elem}_clone() function
> - Do not print userdata content through snprintf API
> - Enhancements for the snprint API to display data according to
>   size and byteorder, this includes new functions
>   nftnl_{expr,set_elem}_set_imm() to decorate the data.
> - Remove a trailing whitespace in snprintf() API for
>   expressions.
> - More improvements for the snprintf() API for set elements:
>   no colon is printed if data is not provided, print object names
>   in maps and print flags only if non-zero.

Link: https://lore.kernel.org/netfilter/apW8N9X8ptmF9fIo@chamomile/T/#u
Signed-off-by: Alexander Dahl <ada@thorsis.com>
---
 rules/libnftnl.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/libnftnl.make b/rules/libnftnl.make
index a62d02998..c45865ba7 100644
--- a/rules/libnftnl.make
+++ b/rules/libnftnl.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_LIBNFTNL) += libnftnl
 #
 # Paths and names
 #
-LIBNFTNL_VERSION	:= 1.3.1
-LIBNFTNL_SHA256		:= 607da28dba66fbdeccf8ef1395dded9077e8d19f2995f9a4d45a9c2f0bcffba8
+LIBNFTNL_VERSION	:= 1.3.2
+LIBNFTNL_SHA256		:= c97abc3409f8fa396b4462b2bb7f147a3a47a4ddc97cfa0b2f18890c9cfde8b0
 LIBNFTNL		:= libnftnl-$(LIBNFTNL_VERSION)
 LIBNFTNL_SUFFIX		:= tar.xz
 LIBNFTNL_URL		:= https://ftp.netfilter.org/pub/libnftnl/$(LIBNFTNL).$(LIBNFTNL_SUFFIX)
-- 
2.47.3

Re: [ptxdist] [APPLIED] libnftnl: version bump 1.3.1 -> 1.3.2

[Michael Olbrich]

Thanks, applied as 989646e39bc9aac60ddca4800091b0e7bbe15a5f.

Michael

[sent from post-receive hook]

On Fri, 18 Sep 2026 11:02:06 +0200, Alexander Dahl <ada@thorsis.com> wrote:
> >From the release announcement:
> 
> > This release contains:
> >
> > - Support for connlimit stateful objects
> > - Fix compilation of examples for musl libc
> > - Validate geneve class and type attribute size in setter
> > - Validate kernel does not provide too long geneve data attribute
> > - Remove internal nftnl_set{,_elem}_clone() function
> > - Do not print userdata content through snprintf API
> > - Enhancements for the snprint API to display data according to
> >   size and byteorder, this includes new functions
> >   nftnl_{expr,set_elem}_set_imm() to decorate the data.
> > - Remove a trailing whitespace in snprintf() API for
> >   expressions.
> > - More improvements for the snprintf() API for set elements:
> >   no colon is printed if data is not provided, print object names
> >   in maps and print flags only if non-zero.
> 
> Link: https://lore.kernel.org/netfilter/apW8N9X8ptmF9fIo@chamomile/T/#u
> Signed-off-by: Alexander Dahl <ada@thorsis.com>
> Message-Id: <20260902103747.771635-2-ada@thorsis.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/libnftnl.make b/rules/libnftnl.make
> index a62d02998905..c45865ba7165 100644
> --- a/rules/libnftnl.make
> +++ b/rules/libnftnl.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_LIBNFTNL) += libnftnl
>  #
>  # Paths and names
>  #
> -LIBNFTNL_VERSION	:= 1.3.1
> -LIBNFTNL_SHA256		:= 607da28dba66fbdeccf8ef1395dded9077e8d19f2995f9a4d45a9c2f0bcffba8
> +LIBNFTNL_VERSION	:= 1.3.2
> +LIBNFTNL_SHA256		:= c97abc3409f8fa396b4462b2bb7f147a3a47a4ddc97cfa0b2f18890c9cfde8b0
>  LIBNFTNL		:= libnftnl-$(LIBNFTNL_VERSION)
>  LIBNFTNL_SUFFIX		:= tar.xz
>  LIBNFTNL_URL		:= https://ftp.netfilter.org/pub/libnftnl/$(LIBNFTNL).$(LIBNFTNL_SUFFIX)

[ptxdist] [PATCH v2 2/2] nftables: version bump 1.1.6 -> 1.1.7

[Alexander Dahl via ptxdist]

>From the announcement:

> This release contains mostly fixes but also new features

Link: https://lore.kernel.org/netfilter/apcPDuB1u6REEd3n@chamomile/T/#u
Signed-off-by: Alexander Dahl <ada@thorsis.com>
---

Notes:
    Not sure about the --enable/disable-extended-parser-errors option here.
    Builds fine with both on stable Debian 13 (trixie), no change in target
    binary size.  Seems like a helpful feature.

 rules/nftables.make | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/rules/nftables.make b/rules/nftables.make
index a7032a7e5..29f3befee 100644
--- a/rules/nftables.make
+++ b/rules/nftables.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_NFTABLES) += nftables
 #
 # Paths and names
 #
-NFTABLES_VERSION	:= 1.1.6
-NFTABLES_SHA256		:= 372931bda8556b310636a2f9020adc710f9bab66f47efe0ce90bff800ac2530c
+NFTABLES_VERSION	:= 1.1.7
+NFTABLES_SHA256		:= a6fbf060d8d4fff001517a2b94f356bb4366bfbf0ba366366f9d27cc38caa58f
 NFTABLES		:= nftables-$(NFTABLES_VERSION)
 NFTABLES_SUFFIX		:= tar.xz
 NFTABLES_URL		:= https://ftp.netfilter.org/pub/nftables/$(NFTABLES).$(NFTABLES_SUFFIX)
@@ -36,8 +36,10 @@ NFTABLES_CONF_OPT	:= \
 	$(CROSS_AUTOCONF_USR) \
 	--$(call ptx/endis, PTXCONF_NFTABLES_DEBUG)-debug \
 	--disable-man-doc \
+	--enable-extended-parser-errors \
 	--disable-fuzzer \
 	--disable-distcheck \
+	--disable-profiling \
 	--$(call ptx/wwo, PTXCONF_NFTABLES_MGMP)-mini-gmp \
 	--without-cli \
 	--without-xtables \
-- 
2.47.3

Re: [ptxdist] [APPLIED] nftables: version bump 1.1.6 -> 1.1.7

[Michael Olbrich]

Thanks, applied as 821aa3cd9380ab70fb1a874e5980cf126d354489.

Michael

[sent from post-receive hook]

On Fri, 18 Sep 2026 11:02:07 +0200, Alexander Dahl <ada@thorsis.com> wrote:
> >From the announcement:
> 
> > This release contains mostly fixes but also new features
> 
> Link: https://lore.kernel.org/netfilter/apcPDuB1u6REEd3n@chamomile/T/#u
> Signed-off-by: Alexander Dahl <ada@thorsis.com>
> Message-Id: <20260902103747.771635-3-ada@thorsis.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/nftables.make b/rules/nftables.make
> index a7032a7e55d9..29f3befee1df 100644
> --- a/rules/nftables.make
> +++ b/rules/nftables.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_NFTABLES) += nftables
>  #
>  # Paths and names
>  #
> -NFTABLES_VERSION	:= 1.1.6
> -NFTABLES_SHA256		:= 372931bda8556b310636a2f9020adc710f9bab66f47efe0ce90bff800ac2530c
> +NFTABLES_VERSION	:= 1.1.7
> +NFTABLES_SHA256		:= a6fbf060d8d4fff001517a2b94f356bb4366bfbf0ba366366f9d27cc38caa58f
>  NFTABLES		:= nftables-$(NFTABLES_VERSION)
>  NFTABLES_SUFFIX		:= tar.xz
>  NFTABLES_URL		:= https://ftp.netfilter.org/pub/nftables/$(NFTABLES).$(NFTABLES_SUFFIX)
> @@ -36,8 +36,10 @@ NFTABLES_CONF_OPT	:= \
>  	$(CROSS_AUTOCONF_USR) \
>  	--$(call ptx/endis, PTXCONF_NFTABLES_DEBUG)-debug \
>  	--disable-man-doc \
> +	--enable-extended-parser-errors \
>  	--disable-fuzzer \
>  	--disable-distcheck \
> +	--disable-profiling \
>  	--$(call ptx/wwo, PTXCONF_NFTABLES_MGMP)-mini-gmp \
>  	--without-cli \
>  	--without-xtables \