Hi,
I'm happy to announce ipset 7.22, which fixes a bug in the 7.21 package
and a race condition between namespace cleanup and the garbage collector
of the list:set type. Also, it corrects the json output format for IP
address ranges.
If you installed the kernel part of the 7.21 package, please upgrade: the
last patch in that series caused a memory leak due to not removing
existing sets in namespace setups.
Userspace changes:
- ipset: fix json output format for IPSET_OPT_IP (Z. Liu)
- tests: add namespace test and take into account delayed
set removal at module remove
- Update autoconfig tools to build cleanly on Debian bookworm
Kernel part changes:
- netfilter: ipset: Fix race between namespace cleanup and gc
in the list:set type
- netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)
- Kill sched.h dependency on rcupdate.h (Kent Overstreet)
- Handle "netfilter: propagate net to nf_bridge_get_physindev" patch
- netfilter: propagate net to nf_bridge_get_physindev (Pavel Tikhomirov)
- Revert "netfilter: ipset: remove set destroy at ip_set module removal"
You can download the source code of ipset from:
https://ipset.netfilter.org
git://git.netfilter.org/ipset.git
Best regards,
Jozsef
--
E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxx
PGP key : https://wigner.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics
H-1525 Budapest 114, POB. 49, Hungary
