ipset 7.16 released

Signed-off-by: Jozsef Kadlecsik <kadlec@netfilter.org>

diff --git a/ChangeLog b/ChangeLog
index c5bf19ca0f3258f1bea166f4022b319b94f83476..8c6ef3cfb7b6143798e51759b646023db925d885 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,18 @@
+7.16
+  - Add new ipset_parse_bitmask() function to the library interface
+  - test: Make sure no more than 64 clashing elements can be added
+    to hash:net,iface sets
+  - netfilter: ipset: add tests for the new bitmask feature (Vishwanath Pai)
+  - netfilter: ipset: Update the man page to include netmask/bitmask options
+    (Vishwanath Pai)
+  - netfilter: ipset: Add bitmask support to hash:netnet (Vishwanath Pai)
+  - netfilter: ipset: Add bitmask support to hash:ipport (Vishwanath Pai)
+  - netfilter: ipset: Add bitmask support to hash:ip (Vishwanath Pai)
+  - netfilter: ipset: Add support for new bitmask parameter (Vishwanath Pai)
+  - ipset-translate: allow invoking with a path name (Quentin Armitage)
+  - Fix IPv6 sets nftables translation (Pablo Neira Ayuso)
+  - Fix typo in ipset-translate man page (Bernhard M. Wiedemann)
+
 7.14
   - Add missing function to libipset.map and bump library version
     (reported by Jan Engelhardt)

diff --git a/configure.ac b/configure.ac
index e1ff357bb3c2bc288be4f81e5232c075c19ea8f4..e94f4db9710d4fce89d4d710075f83ebdb60a6db 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 dnl Boilerplate
-AC_INIT([ipset], [7.15], [kadlec@netfilter.org])
+AC_INIT([ipset], [7.16], [kadlec@netfilter.org])
 AC_CONFIG_AUX_DIR([build-aux])
 AC_CANONICAL_HOST
 AC_CONFIG_MACRO_DIR([m4])

diff --git a/kernel/ChangeLog b/kernel/ChangeLog
index 0ee716d1e7d78e849a26aec640a7810075aba511..b7d22669c4626db133294a70285cc808690088b8 100644 (file)
--- a/kernel/ChangeLog
+++ b/kernel/ChangeLog
@@ -1,3 +1,24 @@
+7.16
+  - netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
+  - Fix all debug mode warnings
+  - netfilter: ipset: Add support for new bitmask parameter (Vishwanath Pai)
+  - netfilter: ipset: regression in ip_set_hash_ip.c (Vishwanath Pai)
+  - netfilter: move from strlcpy with unused retval to strscpy
+    (Wolfram Sang)
+  - compatibility: handle unsafe_memcpy()
+  - netlink: Bounds-check struct nlmsgerr creation (Kees Cook)
+  - compatibility: move to skb_protocol in the code from tc_skb_protocol
+  - Compatibility: check kvcalloc, kvfree, kvzalloc in slab.h too
+  - sched: consistently handle layer3 header accesses in the presence
+    of VLANs (Toke Høiland-Jørgensen)
+  - treewide: Replace GPLv2 boilerplate/reference with SPDX
+    - rule 500 (Thomas Gleixner)
+  - headers: Remove some left-over license text in 
+    include/uapi/linux/netfilter/ (Christophe JAILLET)
+  - netfilter: ipset: enforce documented limit to prevent allocating
+    huge memory
+  - netfilter: ipset: Fix oversized kvmalloc() calls
+
 7.15
   - netfilter: ipset: Fix maximal range check in hash_ipportnet4_uadt()
     (Nathan Chancellor)