Red Hat Product Errata RHBA-2023:0511 - Bug Fix Advisory
Issued:
2023-01-30
Updated:
2023-01-30

RHBA-2023:0511 - Bug Fix Advisory

Synopsis

libnetfilter_conntrack bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libnetfilter_conntract is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.

Description

libnetfilter_conntrack is a userspace library providing a programming interface (API) to the in-kernel connection tracking state table.

Bug Fix(es) and Enhancement(s):

  • conntrack -D with filters sometimes ignores the filters and deletes all connection state (BZ#2151587)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

  • BZ - 2151587 - conntrack -D with filters sometimes ignores the filters and deletes all connection state [rhel-9.0.0.z]

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0

SRPM
libnetfilter_conntrack-1.0.8-4.el9_0.1.src.rpm SHA-256: 9a8588f78d4c896dd253be21eb63f9424669e05b4784c997e7cae5b6d191331c
x86_64
libnetfilter_conntrack-1.0.8-4.el9_0.1.i686.rpm SHA-256: d56fd52aab7f0758071286b9c161a3468a43b00a8d2e24b1a74c6abe1cd93445
libnetfilter_conntrack-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: 43f4bbcc211840d4ff1504a9b20572093844da4bbf39850d3a293df17cb97591
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.i686.rpm SHA-256: cd4adfb39687c97ef3fc3ebf2904e91d9296fc39412c846593bdf30d3d68fe21
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: 20b5a947fe5d6fe988d2ce8baa813114fffc6e90c6cc6063e88ca1711adccd7b
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.i686.rpm SHA-256: 20528e221b25157a7d904a182ab350eb5eacb10a02015919d4099c14bdebaf49
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: 42b0eabe87b5f5d7272745e82cfce07d2554381a7b5b89c98d84e8d235a8e6d1

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0

SRPM
libnetfilter_conntrack-1.0.8-4.el9_0.1.src.rpm SHA-256: 9a8588f78d4c896dd253be21eb63f9424669e05b4784c997e7cae5b6d191331c
s390x
libnetfilter_conntrack-1.0.8-4.el9_0.1.s390x.rpm SHA-256: a93b557da5254e3c4b1dba232f8bdd4ae604147016d234a5921ea32adfd50542
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.s390x.rpm SHA-256: b5aeb663e027c8f9a76b758083e4586e345757bc399c7d037093c4bf07851037
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.s390x.rpm SHA-256: 2e11c9bcb954252991304ac89d3583ae9fcbb19fbb2bc2cf94337e53aef077cd

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0

SRPM
libnetfilter_conntrack-1.0.8-4.el9_0.1.src.rpm SHA-256: 9a8588f78d4c896dd253be21eb63f9424669e05b4784c997e7cae5b6d191331c
ppc64le
libnetfilter_conntrack-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: 40a95431aff91574f9c607907844134a328ecf30ed0c28db4df5f508dd64982e
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: 1f0dde06ab366c322b96c4df7a361a5d6756c7c49fee32292a0f7aa6c52244ea
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: e7387071f1212d36ef188eb7a68e6a39c9b5e7da4d9982bda8d1407dbce81780

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0

SRPM
libnetfilter_conntrack-1.0.8-4.el9_0.1.src.rpm SHA-256: 9a8588f78d4c896dd253be21eb63f9424669e05b4784c997e7cae5b6d191331c
aarch64
libnetfilter_conntrack-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: d6b118f14f623e17e3a16aa30259c3f2d89b65e763d875ec474cb4b66b5c52f0
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: 8f7c208d10a81cdc1cb01b8d3aef3d4d240b873336c6262728ab077fa5d12a7a
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: 4d9353c99ac846f8e53e62b427b376abe4cf72db81a4ee799468f05e1294adcd

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0

SRPM
libnetfilter_conntrack-1.0.8-4.el9_0.1.src.rpm SHA-256: 9a8588f78d4c896dd253be21eb63f9424669e05b4784c997e7cae5b6d191331c
ppc64le
libnetfilter_conntrack-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: 40a95431aff91574f9c607907844134a328ecf30ed0c28db4df5f508dd64982e
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: 1f0dde06ab366c322b96c4df7a361a5d6756c7c49fee32292a0f7aa6c52244ea
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: e7387071f1212d36ef188eb7a68e6a39c9b5e7da4d9982bda8d1407dbce81780

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0

SRPM
libnetfilter_conntrack-1.0.8-4.el9_0.1.src.rpm SHA-256: 9a8588f78d4c896dd253be21eb63f9424669e05b4784c997e7cae5b6d191331c
x86_64
libnetfilter_conntrack-1.0.8-4.el9_0.1.i686.rpm SHA-256: d56fd52aab7f0758071286b9c161a3468a43b00a8d2e24b1a74c6abe1cd93445
libnetfilter_conntrack-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: 43f4bbcc211840d4ff1504a9b20572093844da4bbf39850d3a293df17cb97591
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.i686.rpm SHA-256: cd4adfb39687c97ef3fc3ebf2904e91d9296fc39412c846593bdf30d3d68fe21
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: 20b5a947fe5d6fe988d2ce8baa813114fffc6e90c6cc6063e88ca1711adccd7b
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.i686.rpm SHA-256: 20528e221b25157a7d904a182ab350eb5eacb10a02015919d4099c14bdebaf49
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: 42b0eabe87b5f5d7272745e82cfce07d2554381a7b5b89c98d84e8d235a8e6d1

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.0

SRPM
x86_64
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.i686.rpm SHA-256: cd4adfb39687c97ef3fc3ebf2904e91d9296fc39412c846593bdf30d3d68fe21
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: 20b5a947fe5d6fe988d2ce8baa813114fffc6e90c6cc6063e88ca1711adccd7b
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.i686.rpm SHA-256: 20528e221b25157a7d904a182ab350eb5eacb10a02015919d4099c14bdebaf49
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: 42b0eabe87b5f5d7272745e82cfce07d2554381a7b5b89c98d84e8d235a8e6d1
libnetfilter_conntrack-devel-1.0.8-4.el9_0.1.i686.rpm SHA-256: 5e2aa839e1bf55e9581df87aced2bf2801a4bf852dee3ee0077c76b4bf9b95cb
libnetfilter_conntrack-devel-1.0.8-4.el9_0.1.x86_64.rpm SHA-256: a85b044177abafa01a756bf115b0e3250e5ec191b72ebc2134845845818ce144

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.0

SRPM
ppc64le
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: 1f0dde06ab366c322b96c4df7a361a5d6756c7c49fee32292a0f7aa6c52244ea
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: e7387071f1212d36ef188eb7a68e6a39c9b5e7da4d9982bda8d1407dbce81780
libnetfilter_conntrack-devel-1.0.8-4.el9_0.1.ppc64le.rpm SHA-256: 545a2d60f2cebc396f91b2a8e1a673ce321d90152a91ea412159b957c8095566

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.0

SRPM
s390x
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.s390x.rpm SHA-256: b5aeb663e027c8f9a76b758083e4586e345757bc399c7d037093c4bf07851037
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.s390x.rpm SHA-256: 2e11c9bcb954252991304ac89d3583ae9fcbb19fbb2bc2cf94337e53aef077cd
libnetfilter_conntrack-devel-1.0.8-4.el9_0.1.s390x.rpm SHA-256: 2039b7cde0555b55b210429dad28b1593f7541fda36605f25f09517c4923edcb

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.0

SRPM
aarch64
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: 8f7c208d10a81cdc1cb01b8d3aef3d4d240b873336c6262728ab077fa5d12a7a
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: 4d9353c99ac846f8e53e62b427b376abe4cf72db81a4ee799468f05e1294adcd
libnetfilter_conntrack-devel-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: 46a5868b45cbd9dd53b42a63a776ce81790e7acc1d5add437bfa34f5d58cdc78

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0

SRPM
libnetfilter_conntrack-1.0.8-4.el9_0.1.src.rpm SHA-256: 9a8588f78d4c896dd253be21eb63f9424669e05b4784c997e7cae5b6d191331c
aarch64
libnetfilter_conntrack-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: d6b118f14f623e17e3a16aa30259c3f2d89b65e763d875ec474cb4b66b5c52f0
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: 8f7c208d10a81cdc1cb01b8d3aef3d4d240b873336c6262728ab077fa5d12a7a
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.aarch64.rpm SHA-256: 4d9353c99ac846f8e53e62b427b376abe4cf72db81a4ee799468f05e1294adcd

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0

SRPM
libnetfilter_conntrack-1.0.8-4.el9_0.1.src.rpm SHA-256: 9a8588f78d4c896dd253be21eb63f9424669e05b4784c997e7cae5b6d191331c
s390x
libnetfilter_conntrack-1.0.8-4.el9_0.1.s390x.rpm SHA-256: a93b557da5254e3c4b1dba232f8bdd4ae604147016d234a5921ea32adfd50542
libnetfilter_conntrack-debuginfo-1.0.8-4.el9_0.1.s390x.rpm SHA-256: b5aeb663e027c8f9a76b758083e4586e345757bc399c7d037093c4bf07851037
libnetfilter_conntrack-debugsource-1.0.8-4.el9_0.1.s390x.rpm SHA-256: 2e11c9bcb954252991304ac89d3583ae9fcbb19fbb2bc2cf94337e53aef077cd

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.