Debian Package Tracker
Register | Log in
Subscribe

iptables

administration tools for packet filtering and NAT

Choose email to subscribe with

general
  • source: iptables (main)
  • version: 1.8.13-1
  • maintainer: Debian Netfilter Packaging Team (DMD)
  • uploaders: Arturo Borrero Gonzalez [DMD] – Alberto Molina Coballes [DMD] – Jeremy Sowden [DMD]
  • std-ver: 4.7.3
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 1.8.7-1
  • oldstable: 1.8.9-2
  • stable: 1.8.11-2
  • testing: 1.8.11-4
  • unstable: 1.8.13-1
versioned links
  • 1.8.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.8.9-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.8.11-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.8.11-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 1.8.13-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • iptables (25 bugs: 0, 24, 1, 0)
  • libip4tc-dev
  • libip4tc2
  • libip6tc-dev
  • libip6tc2
  • libiptc-dev
  • libxtables-dev
  • libxtables12
action needed
4 bugs tagged patch in the BTS normal
The BTS contains patches fixing 4 bugs (6 if counting merged bugs), consider including or untagging them.
Created: 2025-01-06 Last update: 2026-03-07 12:30
8 new commits since last upload, is it time to release? normal
vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:
commit 2728028f03baa7222760ccc7709c43c38201ee6f
Author: Jeremy Sowden <azazel@debian.org>
Date:   Wed Mar 4 14:59:25 2026 +0000

    d/changelog: finalize entry for 1.8.13-1
    
    Signed-off-by: Jeremy Sowden <azazel@debian.org>

commit f8c8906ea7310800e3348705cde36fc354fe7de4
Author: Jeremy Sowden <azazel@debian.org>
Date:   Wed Mar 4 14:59:01 2026 +0000

    d/patches: refresh patches
    
    Signed-off-by: Jeremy Sowden <azazel@debian.org>

commit 9aaa7cbbb32933d49da13cfa68622a475c9a3c45
Author: Jeremy Sowden <azazel@debian.org>
Date:   Wed Mar 4 14:54:02 2026 +0000

    d/changelog: add entry for 1.8.13-1
    
    Signed-off-by: Jeremy Sowden <azazel@debian.org>

commit 9a66a90715e1e808535fe34521c1207f289b10dd
Merge: e2a7319 73de0b7
Author: Jeremy Sowden <azazel@debian.org>
Date:   Wed Mar 4 12:54:26 2026 +0000

    Update upstream source from tag 'upstream/1.8.13'
    
    Update to upstream version '1.8.13'
    with Debian dir 4c9c56c121c1f465b3879e7d6e340bc49338f922

commit 73de0b789293fbf4b41a9fcb9969a80078660051
Merge: 5e6b0e4 afd5255
Author: Jeremy Sowden <azazel@debian.org>
Date:   Wed Mar 4 12:54:12 2026 +0000

    New upstream version 1.8.13

commit afd52551c98871b8ac0321eed8efa0845956037c
Author: Pablo Neira Ayuso <pablo@netfilter.org>
Date:   Wed Mar 4 00:41:29 2026 +0100

    configure: Bump version for 1.8.13 release
    
    Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

commit 6fff7039c06f0084ed35d7a73a6784ef0c12619e
Author: Florian Westphal <fw@strlen.de>
Date:   Mon Feb 23 23:45:53 2026 +0100

    Revert "libxtables: refuse to run under file capabilities"
    
    This reverts commit a2a733e9f0da779bbe009736644f4481e22ca3d1.
    
    The new iptables 1.8.12 release is broken on docker, pinpointed to the
    getauxval() change that apparently can be nonzero in presence of LSMs.
    
    That makes getauxval() useless for the purpose of detecting a setcap binary.
    So revert this.
    
    Bugzilla: https://bugzilla.netfilter.org/show_bug.cgi?id=1830
    Signed-off-by: Florian Westphal <fw@strlen.de>

commit 342291e0ff56fb33bc62f9131ce2eab18d0b357d
Author: Rudi Heitbaum <rudi@heitbaum.com>
Date:   Fri Feb 20 09:37:46 2026 +0000

    src: fix discards 'const' qualifier
    
    argv is passed by parse_change_counters_rule and do_parse to parse_rule_range
    as a const char. parse_rule_range modifies thepassed in argv, so pass as
    non const so that it can be modified without warning.
    
    Fixes:
    iptables/xshared.c: In function 'parse_rule_range':
    iptables/xshared.c:912:23: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
     912 |         char *colon = strchr(argv, ':'), *buffer;
         |                       ^~~~~~
    
    p is used as the return from strchr(sctp_chunk_names[i].valid_flags)
    which is a const char. Declare p as a const char * pointer for use
    addressing the warning.
    
    Fixes:
    extensions/libxt_sctp.c: In function 'parse_sctp_chunk':
    extensions/libxt_sctp.c:211:40: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
      211 |                                 if ((p = strchr(sctp_chunk_names[i].valid_flags,
          |                                        ^
    
    next is used as the return from strchr(loop) which is a const char.
    Declare next as a const char * pointer for use addressing the warning.
    
    Fixes:
     libxtables/xtables.c: In function 'xtables_ipparse_multiple':
     libxtables/xtables.c:1767:22: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
     1767 |                 next = strchr(loop, ',');
          |                      ^
     libxtables/xtables.c: In function 'xtables_ip6parse_multiple':
     libxtables/xtables.c:2066:22: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
     2066 |                 next = strchr(loop, ',');
          |                      ^
    
    Signed-off-by: Rudi Heitbaum <rudi@heitbaum.com>
    Signed-off-by: Florian Westphal <fw@strlen.de>
Created: 2026-03-04 Last update: 2026-03-04 21:01
testing migrations
  • excuses:
    • Migration status for iptables (1.8.11-4 to 1.8.13-1): Waiting for test results or another package, or too young (no action required now - check later)
    • Issues preventing migration:
    • ∙ ∙ Too young, only 2 of 5 days old
    • Additional info (not blocking):
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/i/iptables.html
    • ∙ ∙ Autopkgtest for debci/3.13: amd64: Pass ♻ (reference ♻), ppc64el: Pass ♻, s390x: Pass ♻
    • ∙ ∙ Autopkgtest for hippotat/1.2.3: amd64: Pass ♻ (reference ♻), ppc64el: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ Autopkgtest for iptables/1.8.13-1: amd64: No tests, superficial or marked flaky ♻ (reference ♻), arm64: No tests, superficial or marked flaky ♻ (reference ♻), i386: No tests, superficial or marked flaky ♻ (reference ♻), ppc64el: No tests, superficial or marked flaky ♻, riscv64: No tests, superficial or marked flaky ♻, s390x: No tests, superficial or marked flaky ♻
    • ∙ ∙ Reproduced on amd64
    • ∙ ∙ Reproduced on arm64
    • ∙ ∙ Reproduced on armhf
    • ∙ ∙ Reproduced on i386
    • ∙ ∙ Reproduced on ppc64el
    • Not considered
news
[rss feed]
  • [2026-03-04] Accepted iptables 1.8.13-1 (source) into unstable (Jeremy Sowden)
  • [2026-02-28] Accepted iptables 1.8.12-2 (source) into unstable (Jeremy Sowden)
  • [2026-02-20] Accepted iptables 1.8.12-1 (source) into unstable (Jeremy Sowden)
  • [2025-12-12] iptables 1.8.11-4 MIGRATED to testing (Debian testing watch)
  • [2025-12-06] Accepted iptables 1.8.11-4 (source) into unstable (Jeremy Sowden)
  • [2025-11-15] Accepted iptables 1.8.11-3 (source) into unstable (Jeremy Sowden)
  • [2024-12-08] iptables 1.8.11-2 MIGRATED to testing (Debian testing watch)
  • [2024-11-20] Accepted iptables 1.8.11-2 (source) into unstable (Jeremy Sowden)
  • [2024-11-08] Accepted iptables 1.8.11-1 (source) into unstable (Jeremy Sowden)
  • [2024-07-05] iptables 1.8.10-4 MIGRATED to testing (Debian testing watch)
  • [2024-06-01] Accepted iptables 1.8.10-4 (source) into unstable (Jeremy Sowden)
  • [2024-01-20] iptables 1.8.10-3 MIGRATED to testing (Debian testing watch)
  • [2024-01-17] Accepted iptables 1.8.10-3 (source) into unstable (Jeremy Sowden)
  • [2024-01-14] iptables 1.8.10-2 MIGRATED to testing (Debian testing watch)
  • [2024-01-11] Accepted iptables 1.8.10-2 (source) into unstable (Jeremy Sowden)
  • [2023-12-16] iptables 1.8.10-1 MIGRATED to testing (Debian testing watch)
  • [2023-12-13] Accepted iptables 1.8.10-1 (source) into unstable (Jeremy Sowden) (signed by: Arturo Borrero Gonzalez)
  • [2023-01-23] iptables 1.8.9-2 MIGRATED to testing (Debian testing watch)
  • [2023-01-16] Accepted iptables 1.8.9-2 (source) into unstable (Arturo Borrero Gonzalez)
  • [2023-01-16] Accepted iptables 1.8.9-1 (source) into unstable (Arturo Borrero Gonzalez)
  • [2022-05-26] iptables 1.8.8-1 MIGRATED to testing (Debian testing watch)
  • [2022-05-23] Accepted iptables 1.8.8-1 (source) into unstable (Arturo Borrero Gonzalez)
  • [2021-01-20] iptables 1.8.7-1 MIGRATED to testing (Debian testing watch)
  • [2021-01-17] Accepted iptables 1.8.7-1 (source) into unstable (Arturo Borrero Gonzalez)
  • [2020-11-12] iptables 1.8.6-1 MIGRATED to testing (Debian testing watch)
  • [2020-11-09] Accepted iptables 1.8.6-1 (source) into unstable (Arturo Borrero Gonzalez)
  • [2020-08-27] iptables 1.8.5-3 MIGRATED to testing (Debian testing watch)
  • [2020-08-25] Accepted iptables 1.8.5-3~bpo10+1 (source) into buster-backports (Arturo Borrero Gonzalez)
  • [2020-08-25] Accepted iptables 1.8.5-3 (source) into unstable (Arturo Borrero Gonzalez)
  • [2020-06-26] iptables 1.8.5-2 MIGRATED to testing (Debian testing watch)
  • 1
  • 2
bugs [bug history graph]
  • all: 22 25
  • RC: 0
  • I&N: 21 24
  • M&W: 1
  • F&P: 0
  • patch: 4 6
links
  • homepage
  • lintian
  • buildd: logs, reproducibility, cross
  • popcon
  • browse source code
  • edit tags
  • other distros
  • security tracker
  • screenshots
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 1.8.11-2ubuntu3
  • 13 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing