summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* unbound: upgrade 1.12.0 -> 1.13.2zhengruoqin2021-09-141-1/+1
| | | | | | | | | | | | | | | | | | | | Features Merge PR #317: ZONEMD Zone Verification, with RFC 8976 support. ZONEMD records are checked for zones loaded as auth-zone, with DNSSEC if available. There is an added option zonemd-permissive-mode that makes it log but not fail wrong zones. With zonemd-reject-absence for an auth-zone the presence of a zonemd can be mandated for specific zones. Fix: Resolve interface names on control-interface too. Merge #470 from edevil: Allow configuration of persistent TCP connections. Fix #474: always_null and others inside view. Add that log-servfail prints an IP address and more information about one of the last failures for that query. Merge #478: Allow configuration of TCP timeout while waiting for response. Add ./configure --with-deprecate-rsa-1024 that turns off RSA 1024. Move the NSEC3 max iterations count in line with the 150 value used by BIND, Knot and PowerDNS. This sets the default value for it in the configuration to 150 for all key sizes. zonemd-check: yesno option, default no, enables the processing of ZONEMD records for that zone. Merge #486 by fobster: Make VAL_MAX_RESTART_COUNT configurable. Merge PR #491: Add SVCB and HTTPS types and handling according to draft-ietf-dnsop-svcb-https. Introduce 'http-user-agent:' and 'hide-http-user-agent:' options. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: upgrade 2.85 -> 2.86wangmy2021-09-142-8/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | version 2.86 Handle DHCPREBIND requests in the DHCPv6 server code. Thanks to Aichun Li for spotting this omission, and the initial patch. Fix bug which caused dnsmasq to lose track of processes forked to handle TCP DNS connections under heavy load. The code checked that at least one free process table slot was available before listening on TCP sockets, but didn't take into account that more than one TCP connection could arrive, so that check was not sufficient to ensure that there would be slots for all new processes. It compounded this error by silently failing to store the process when it did run out of slots. Even when this bug is triggered, all the right things happen, and answers are still returned. Only under very exceptional circumstances, does the bug manifest itself: see https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2021q2/014976.html Thanks to Tijs Van Buggenhout for finding the conditions under which the bug manifests itself, and then working out exactly what was going on. Major rewrite of the DNS server and domain handling code. This should be largely transparent, but it drastically improves performance and reduces memory foot-print when configuring large numbers domains of the form local=/adserver.com/ or local=/adserver.com/# Lookup times now grow as log-to-base-2 of the number of domains, rather than greater than linearly, as before. The change makes multiple addresses associated with a domain work address=/example.com/1.2.3.4 address=/example.com/5.6.7.8 It also handles multiple upstream servers for a domain better; using the same try/retry algorithms as non domain-specific servers. This also applies to DNSSEC-generated queries. Finally, some of the oldest and gnarliest code in dnsmasq has had a significant clean-up. It's far from perfect, but it _is_ better. Revise resource handling for number of concurrent DNS queries. This used to have a global limit, but that has a problem when using different servers for different upstream domains. Queries which are routed by domain to an upstream server which is not responding will build up and trigger the limit, which breaks DNS service for all other domains which could be handled by other servers. The change is to make the limit per server-group, where a server group is the set of servers configured for a particular domain. In the common case, where only default servers are declared, there is no effective change. Improve efficiency of DNSSEC. The sharing point for DNSSEC RR data used to be when it entered the cache, having been validated. After that queries requiring the KEY or DS records would share the cached values. There is a common case in dual-stack hosts that queries for A and AAAA records for the same domain are made simultaneously. If required keys were not in the cache, this would result in two requests being sent upstream for the same key data (and all the subsequent chain-of-trust queries.) Now we combine these requests and elide the duplicates, resulting in fewer queries upstream and better performance. To keep a better handle on what's going on, the "extra" logging mode has been modified to associate queries and answers for DNSSEC queries in the same way as ordinary queries. The requesting address and port have been removed from DNSSEC logging lines, since this is no longer strictly defined. Connection track mark based DNS query filtering. Thanks to Etan Kissling for implementing this It extends query filtering support beyond what is currently possible with the `--ipset` configuration option, by adding support for: 1) Specifying allowlists on a per-client basis, based on their associated Linux connection track mark. 2) Dynamic configuration of allowlists via Ubus. 3) Reporting when a DNS query resolves or is rejected via Ubus. 4) DNS name patterns containing wildcards. Disallowed queries are not forwarded; they are rejected with a REFUSED error code. Allow smaller than 64 prefix lengths in synth-domain, with caveats. --synth-domain=1234:4567::/56,example.com is now valid. Make domains generated by --synth-domain appear in replies when in authoritative mode. Ensure CAP_NET_ADMIN capability is available when conntrack is configured. Thanks to Yick Xie for spotting the lack of this. When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are given a directory as argument, define the order in which files within that directory are read (alphabetical order of filename). Thanks to Ed Wildgoose for the initial patch and motivation for this. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndisc6: Upgrade 1.0.4 -> 1.0.5William A. Kennington III2021-09-143-158/+2
| | | | | | | | | | | | STABLE RELEASE 1.0.5: - Add --no-solicit option to skip sending the discovery packet. - Ignore multicast advertisements when discovery was sent as unicast - Since its point release, no need to use +git${SRCPV} in PV it can be absolute Signed-off-by: William A. Kennington III <wak@google.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: make sure snmpd always exit after displaying usageYi Zhao2021-09-142-0/+56
| | | | | | | | | | | | | | | | Currently, viewing the help text with snmpd -h results in snmpd being started in the background. $ snmpd -h Usage: snmpd [OPTIONS] [LISTENING ADDRESSES] [snip] $ ps -ef | grep snmpd root 1477 1 0 05:46 ? 00:00:00 snmpd -h Backport a patch to fix this issue. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: drop unused patchYi Zhao2021-09-141-1652/+0
| | | | | | | Remove backported patch systemd-support.patch. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: upgrade 4.2 -> 5.0Changqing Li2021-09-094-32/+29
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: upgrade 3.4 -> 4.0Changqing Li2021-09-092-8/+11
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 2.0.11 -> 2.0.12zhengruoqin2021-09-081-2/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.4.7 -> 3.4.8zhengruoqin2021-09-051-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndisc6: fix typo in DESCRIPTION variable namePatrick Williams2021-09-031-2/+2
| | | | | Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.9 -> 1.0.0Trevor Gamblin2021-09-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | From the changelog (https://marc.info/?l=netfilter&m=162939459210790&w=2): - Catch-all set element support: This allows users to define the special wildcard set element for anything else not defined in the set - Define variables from the command line through --define - Allow to use stateful expressions in maps - Add command to list the netfilter hooks pipeline for a given packet family. If device is specified, then ingress path is also included - Allow to combine jhash, symhash and numgen expressions with the queue statement, to fan out packets to userspace queues via nfnetlink_queue - Expand variable containing set into multiple mappings - Allow to combine verdict maps with interval concatenations - Simplify syntax for NAT mappings. You can specify an IP range, or a specific IP and port, or a combination of range of IP addresses and ports - Bugfixes Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 35.0 -> 36.0zangrc2021-08-301-1/+1
| | | | | | | | | | | | | | | | | Changes: d7a9dde Merge pull request from yishaih/mlx5_misc 3133cf5 Merge pull request from yishaih/mlx5_dr 47c0f43 tests: Add raw wqe test 5af61e8 pyverbs: Added mlx5dv_wr_raw_wqe wrapper b0e2dca pyverbs: Add mlx5_wqe_ctrl_seg, mlx5_wqe_data_seg wrapper 8ff1c5c mlx5: Introduce mlx5dv_wr_raw_wqe builder 2d15a14 Merge pull request from yishaih/mlx5_cq 0c40d53 mlx5: Avoid translation from free running to real time 95d660b Update kernel headers a66e2a5 Merge pull request from rpearsonhpe/mw Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Use new override syntax for USERADD_PARAMPeter Kjellerstedt2021-08-271-1/+1
| | | | | | | This was introduced in commit 18306e6f. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Fix privdrop packageconfigEaswar Hariharan2021-08-261-1/+10
| | | | | | | | | To drop root privileges on Linux-based systems, chrony requires a standard user to switch to and the use of capabilities. Fix up the privdrop packageconfig to account for this. Signed-off-by: Easwar Hariharan <easwar.hariharan@microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.8 -> 1.32.10wangmy2021-08-261-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking: Add bmonKhem Raj2021-08-231-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bmon: Add recipePatrick Areny2021-08-231-0/+12
| | | | | | | | bmon is a monitoring and debugging tool to capture networking related statistics and prepare them visually in a human friendly way Signed-off-by: Patrick Areny <patrick.areny@notiloplus.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libConfuse: Add recipePatrick Areny2021-08-231-0/+14
| | | | | | | | libconfuse a configuration file parser library written in C Used by bmon network monitor. Signed-off-by: Patrick Areny <patrick.areny@notiloplus.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vsftpd: Upgrade to 3.0.5Mingli Yu2021-08-2311-101/+1
| | | | | | | | | Drop 2 seccomp patches as seccomp sandbox policy tweaks in new version [1]. [1] https://security.appspot.com/vsftpd/Changelog.txt Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: upgrade 0.102 -> 0.103wangmy2021-08-233-40/+30
| | | | | | | | | | 0001-Handle-enum-element-override.patch removed since it is included in 0.103 Add patch to fix bug for 32bit format string bug. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.4 -> 1.32.8Andreas Müller2021-08-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | =============================================== NetworkManager-1.32.8 Overview of changes since NetworkManager-1.32.6 =============================================== * firewalld: configure zones on "Reloaded" signal. * core: fix wrong MTU for bridge interfaces. * cloud-setup: fix gateway address for Aliyun cloud. =============================================== NetworkManager-1.32.6 Overview of changes since NetworkManager-1.32.4 =============================================== * core: fix adding stale local routes when address changes. * initrd: tag generated profiles with origin in user data. * core: introduce "allowed-connections" option to disallow profiles on a device. This allows to filter out profiles that originate from initrd. * core: introduce "keep-configuration" device option to forcefully activate a profile on start. * dhcp: handle filename/bootfile_name DHCP option and write it to device state file for initrd/kickstart. * initrd: add "ib.pkey=" command line option Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.20 -> 6.4.21wangmy2021-08-201-1/+1
| | | | | | | | | | | | | | | | | * The new security fix in 6.4.20 for CVE-2021-36386 caused truncation of messages logged to buffered outputs, predominantly --logfile. This also caused lines in the logfile to run into one another because the fragment containing the '\n' line-end character was usually lost. Reason is that on all modern systems (with <stdarg.h> header and vsnprintf() interface), the length of log message fragments was added up twice, so that these ended too deep into a freshly allocated buffer, after the '\0' byte. Unbuffered outputs flushed the fragments right away, which masked the bug. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: add PACKAGECONFIG for audit and selinuxYi Zhao2021-08-121-0/+3
| | | | | | | Add them to PACKAGECONFIG if enable selinux distro feature. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: typo fix fakse --> falseGeoff Parker2021-08-111-1/+1
| | | | | Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: fix CVE-2021-36082Changqing Li2021-08-102-0/+117
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntax using latest convert-overrides.py scriptChen Qi2021-08-091-1/+1
| | | | | | | | This patch is the result of running the latest convert-ovrrides.py script. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* curlpp: fix QA Issue after LDFLAGS changeTony Battersby2021-08-091-0/+7
| | | | | | | | | | | | | Adding -f*-prefix-map to LDFLAGS caused the following issue: QA Issue: curlpp.pc failed sanity test (tmpdir) Fix by filtering out -f*-prefix-map from *.pc files. [YOCTO #14481] Signed-off-by: Tony Battersby <tonyb@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nis: Drop uclibc check in anon python functionKhem Raj2021-08-061-9/+0
| | | | | | uclibc is no longer supported Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.19 -> 6.4.20wangmy2021-08-061-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Fix override syntaxKhem Raj2021-08-061-1/+1
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Martin Jansa <Martin.Jansa@gmail.com>
* layer.conf: Update to honisterMartin Jansa2021-08-031-1/+1
| | | | | | | This marks the layers as compatible with honister now they use the new override syntax. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-03149-856/+856
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ntp: Fix make checkKhem Raj2021-08-032-0/+67
| | | | | | Some test code is not yet ported to build with gcc 11 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: Do not use PTHREAD_STACK_MIN on glibcKhem Raj2021-08-032-0/+33
| | | | | | Int not a compile time constant in glibc 2.34+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: Fix build with glibc 2.34+Khem Raj2021-08-033-14/+116
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* addcli: check for ns_get16 and ns_get32Khem Raj2021-08-032-1/+41
| | | | | | Fixes build with glibc 2.34+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.2 -> 1.32.4wangmy2021-07-291-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: fix QA Issue after LDFLAGS changeTony Battersby2021-07-291-0/+5
| | | | | | | | | | | | | Adding -f*-prefix-map to LDFLAGS caused the following issue: QA Issue: netsnmp-agent.pc failed sanity test (tmpdir) Fix by filtering out -f*-prefix-map from *.pc files. [YOCTO #14481] Signed-off-by: Tony Battersby <tonyb@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.6.1 -> 3.6.2Yi Zhao2021-07-271-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: update to 3.4.7Armin Kuster2021-07-271-1/+1
| | | | | | | | Stable branch bug fix update. Includes: CVE-2021-22235 Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: upgrade 1.43.0 -> 1.44.0wangmy2021-07-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | v1.44.0 changelog: lib: Port new ngtcp2 map implementation doc: Replace master with main build: Add precious variables for libev and jemalloc and use JEMALLOC_CFLAGS build: Add more --with-* configure flags build: Add LIBTOOL_LDFLAGS configure variable third-party: Bump llhttp to 6.0.2 src: Replace black-list with block-list nghttpx: Fix max distance in weight group/address cycle comparison nghttpx: Set connect_blocker and live_check after shuffling addresses nghttpx: Replace master with main nghttpx: Remove trailing white space after $method log variable (https://github.com/nghttp2/nghttp2/pull/1553) h2load: Add --rps option (https://github.com/nghttp2/nghttp2/pull/1559) h2load: Allow unit in -D option asio: fix some typos (Patch from Jan Kundrát) (https://github.com/nghttp2/nghttp2/pull/1550) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.3.2 -> 2.3.3wangmy2021-07-271-3/+3
| | | | | | | | | | | | License-Update: add note: ** NOTE! The following LGPL license applies to the talloc ** library. This does NOT imply that all of Samba is released ** under the LGPL "GNU General Public License" changed to "GNU Lesser General Public License" Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openlldp: fix segfaultLi Wang2021-07-272-0/+332
| | | | | | | | | | | | | | | | | ~ lldpad -d ~ 8021q: 802.1Q VLAN Support v1.8 ~ 8021q: adding VLAN 0 to HW filter on device eth0 ~ lldpad[xxx]: segfault at 0 ip xxx sp xxx error 4 in lldpad[xxx+xxx] ~ Code: xxx the issue is introduced by: 0002-lldp_head-rename-and-make-extern.patch Upstream patches: https://github.com/intel/openlldp/commit/ed6a8e5a75f56b7034a46294a0bf2a9a7fd14fbc Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netperf: Add systemd unit fileKhem Raj2021-07-272-4/+17
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netperf: Update to latestKhem Raj2021-07-271-3/+2
| | | | | | | | License-Update: Upstream has switched to MIT [1] [1] https://github.com/HewlettPackard/netperf/commit/2d88bcc75d97f462eafe8605f8da0c1f875b7dad Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: Upgrade to 5.1.7Khem Raj2021-07-177-91/+175
| | | | | | | | | | | | | | | License-Update: correct fsf address [1] - Drop upstreamed autofs-5.0.7-include-linux-nfs.h-directly-in-rpc_sub.patch - Forward port remaining patches - Package libautofs.so which is new - Add a patch to fix build on musl systems - Detailed ChangeLog [2] [1] https://git.kernel.org/pub/scm/linux/storage/autofs/autofs.git/commit/COPYING?id=b74dcdd3f6b05522388729141c29286829c302fc [2] https://www.spinics.net/lists/autofs/msg02344.html Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layers: Fix git send-email instructions in READMEKhem Raj2021-07-171-1/+1
| | | | | | This ensures that cut-n-paste of this command from README will work Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: Upgrade to 3.6.1Khem Raj2021-07-162-1/+103
| | | | | | | | | Fix build with glibc 2.34+ Details of this release [1] [1] http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.6.1.RELEASE_NOTES Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.2 -> 5.9.3zangrc2021-07-131-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | - Added AES_ECB, SHA-3 and SHAKE-256 support to wolfssl plugin. - Added AES_CCM and SHA-3 signature support to openssl plugin. - The x509 and openssl plugins now consider the authorityKeyIdentifier, if available, before verifying signatures, which avoids unnecessary signature verifications after a CA key rollover if both certificates are loaded. - The pkcs11 plugin better handles optional attributes like CKA_TRUSTED, which previously depended on a version check. - charon-nm now supports using SANs as client identities, not only full DNs. - charon-tkm now handles IKE encryption. - A MOBIKE update is sent again if a a change in the NAT mappings is detected but the endpoints stay the same. - Converted most of the test case scenarios to the vici interface Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.9.3 -> 0.9.4zangrc2021-07-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bug fix only release. $ git shortlog --grep "^fix" v0.9.3..v0.9.4 Eric Garver (10): fix(dbus): conf: setting deprecated properties should be ignored fix(dbus): properties: IPv4 and IPv6 should be true if using nftables fix(fw): when checking tables make sure to check the actual backend fix(ipset): nftables: use interval flag for "ip" types fix(rpm): applet: don't replace config modified by admin fix(rpm): logrotate: don't replace config modified by admin fix(ipv6_filter): match fwmark fix(direct): rule order with multiple address with -s/-d fix(nm): reload: only consider NM connections with a real interface fix(policy): warn instead of error for overlapping ports Fabrizio D'Angelo (1): fix(ipset): fix hash:net,net functionality Robert Richmond (1): fix(ipset): entry delete with timeout Ye Shu (1): fix(applet): Show a basic tooltip instead of HTML Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-05 06:57:21 +0000