Your message dated Sun, 07 Dec 2025 19:07:44 +0000
with message-id <[email protected]>
and subject line Bug#1121439: fixed in nftables 1.1.6-1
has caused the Debian Bug report #1121439,
regarding nftables: nft segfaults when flushing set
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1121439: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121439
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: nftables
Version: 1.1.3-1
Severity: normal
Tags: patch upstream
X-Debbugs-Cc: [email protected]
Hi,
I've discovered a bug where nftables crashes when flushing a set shortly after
it's created on trixie, which used to work fine on bookworm. I've already
reported this upstream and the maintainer has fixed it.
Bug report: https://bugzilla.netfilter.org/show_bug.cgi?id=1821
Patch:
https://git.netfilter.org/nftables/commit/?id=8b7a533f8f8b276bfa71dcb306d6857e54015234
I'm not sure if I should report this here as well or if upstream fixes get
pulled automatically. Feel free to close this if it's not necessary.
Thanks!
-- System Information:
Debian Release: 13.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.41+deb13-cloud-amd64 (SMP w/3 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
--- End Message ---
--- Begin Message ---
Source: nftables
Source-Version: 1.1.6-1
Done: Jeremy Sowden <[email protected]>
We believe that the bug you reported is fixed in the latest version of
nftables, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy Sowden <[email protected]> (supplier of updated nftables package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 07 Dec 2025 09:07:32 +0000
Source: nftables
Architecture: source
Version: 1.1.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Netfilter Packaging Team
<[email protected]>
Changed-By: Jeremy Sowden <[email protected]>
Closes: 1121439
Changes:
nftables (1.1.6-1) unstable; urgency=medium
.
* [76930dd] d/watch: add `Matching-Pattern`, use `@PACKAGE@` in `Source:`
* [2ffdc3a] New upstream version 1.1.6 (Closes: #1121439)
- Complete lightweight tunnel template support, including vxlan,
geneve and erspan
- Support for wildcard in netdev hooks
- Support to pass up bridge frame to the bridge device for local
processing
- fib expression correct bytecode for Big Endian and other Big Endian
fixes
- man nft(8) documentation updates
* [5e550d0] d/patches: drop upstreamed patches
* [8db0897] d/control: bump min. version for libnftnl-dev build-dep to
1.3.1
* [0a941cd] d/rules: drop obsolete configure option
* [7a1086c] d/rules: suppress running of test-suites
* [33bbeba] d/tests: drop obsolete minimum kernel-version checks from
test-runners
* [baaeb07] d/t/internaltest-monitor.sh: use `-H` option to test with
installed nft
* [705fbab] d/t/internaltest-py.sh: use `-H` option to test with
installed nft
* [64c9797] d/t/internaltest-json-echo.sh: run new test-suite
* [4d2ee27] d/t/control: add gawk dependency for shell test-suite
* [201eb5a] d/rules: use `$(DEB_SOURCE)` for source package name
* [d12f0ee] d/rules: use `$(SOURCE_DATE_EPOCH)` for build time-stamp
* [c380eb1] d/p/fix-man-page-typo.patch: new patch to fix typo
Checksums-Sha1:
9731a092f4996e2232145d278344c8e4ff15bf2b 2832 nftables_1.1.6-1.dsc
8446d54ccd914ad3abd99aff5a09a238fd0fe001 1025092 nftables_1.1.6.orig.tar.xz
9c0c799b2776bb59bdb10b9c2bad91a2526e50c0 833 nftables_1.1.6.orig.tar.xz.asc
68be442e6fe121358b80a4ae2ff745bd558b135b 23692 nftables_1.1.6-1.debian.tar.xz
eb75026b3a66ebe83c6ae10046f5c9443a4737db 9389 nftables_1.1.6-1_amd64.buildinfo
Checksums-Sha256:
a5cbac16ffac3fd8bc56179a4814cebe212a1e7b84854e0f1b4d76b419d1715e 2832
nftables_1.1.6-1.dsc
372931bda8556b310636a2f9020adc710f9bab66f47efe0ce90bff800ac2530c 1025092
nftables_1.1.6.orig.tar.xz
2ee74c450487ea3ff8e80ff8605c38eb19057801190e794c5be29e75a457ed8d 833
nftables_1.1.6.orig.tar.xz.asc
4bd8a02109e568af27b2ecb2dad05db43570321788abee0ae87fec211dde0646 23692
nftables_1.1.6-1.debian.tar.xz
92ba9612e2aec006407bad857ab1a7db156c4ab73a200a69920d309e13d54cfb 9389
nftables_1.1.6-1_amd64.buildinfo
Files:
6295dc05d139c9454c8cff07c7a14760 2832 net important nftables_1.1.6-1.dsc
638ddff35ca429f68860a437d53237b4 1025092 net important
nftables_1.1.6.orig.tar.xz
bcb5d4a8e921931e2103490612839fa9 833 net important
nftables_1.1.6.orig.tar.xz.asc
eb0afc2d7482862d2a753cf58fe52c2c 23692 net important
nftables_1.1.6-1.debian.tar.xz
a20f1ca1afc2f4007dfdb5a4cb3f0c1f 9389 net important
nftables_1.1.6-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=uiv8
-----END PGP SIGNATURE-----
pgpP3o2xbvKMg.pgp
Description: PGP signature
--- End Message ---