Red Hat Product Errata RHBA-2025:21012 - Bug Fix Advisory
Issued:
2025-11-11
Updated:
2025-11-11

RHBA-2025:21012 - Bug Fix Advisory

Synopsis

nftables bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for nftables is now available for Red Hat Enterprise Linux 10.

Description

nftables provides a packet-filtering tool, with numerous improvements in convenience, features, and performance. It is the designated successor to iptables, ip6tables, arptables and ebtables.

Bug Fix(es) and Enhancement(s):

  • nft manpage implies address is always required with dnat, but it's not (JIRA:RHEL-106743)
  • Attach creating nftables version info to tables' user data (JIRA:RHEL-108851)
  • Fix for memleak in trace_alloc_list() error path (JIRA:RHEL-111205)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 10 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 10 s390x
  • Red Hat Enterprise Linux for Power, little endian 10 ppc64le
  • Red Hat Enterprise Linux for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 10 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
  • Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
  • Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x

Fixes

  • RHEL-108851 - Attach creating nftables version info to tables' user data
  • RHEL-111205 - Fix for memleak in trace_alloc_list() error path

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 10

SRPM
nftables-1.1.1-6.el10_1.src.rpm SHA-256: 0f7b851cdbbd1e02fd926df1fc0f9c27268974c11b9f69a91cd3cfc2a84ec19d
x86_64
nftables-1.1.1-6.el10_1.x86_64.rpm SHA-256: 28e86d157d974bd487324dd477fd7418306d7f4e8a13b87cafde2f94875c03d3
nftables-debuginfo-1.1.1-6.el10_1.x86_64.rpm SHA-256: 5cc8c4d73fee70aa716d3dd50db4b22b3004799df89667b7e472a8fa7e85c88f
nftables-debugsource-1.1.1-6.el10_1.x86_64.rpm SHA-256: 766654d78c7b69f9bfc37050e0d2be8216bbf88d62a8ef432517e1a220f1ec9a
python3-nftables-1.1.1-6.el10_1.x86_64.rpm SHA-256: 88c40bba3289563c0641ee585dd6ce4076fdef01aba088558cb5f1b8fadfb6af

Red Hat Enterprise Linux for IBM z Systems 10

SRPM
nftables-1.1.1-6.el10_1.src.rpm SHA-256: 0f7b851cdbbd1e02fd926df1fc0f9c27268974c11b9f69a91cd3cfc2a84ec19d
s390x
nftables-1.1.1-6.el10_1.s390x.rpm SHA-256: 3707480941bf52ddc7f70bcc09e03d15e4a2bac5562d4b3e719733e6e1dae3d6
nftables-debuginfo-1.1.1-6.el10_1.s390x.rpm SHA-256: 0b5c52be20598d4e7fe8e0924492fc0c0b4d94a68a79f5c9312f53af17134e7b
nftables-debugsource-1.1.1-6.el10_1.s390x.rpm SHA-256: e5f45d03e19930c1c28af696f908cc071ffe3326aa8bf2938b5336587da2ad44
python3-nftables-1.1.1-6.el10_1.s390x.rpm SHA-256: 3681493d05b2fc6a9017db66225a66f4c13c8dc96134c218a769f4d209d50c1c

Red Hat Enterprise Linux for Power, little endian 10

SRPM
nftables-1.1.1-6.el10_1.src.rpm SHA-256: 0f7b851cdbbd1e02fd926df1fc0f9c27268974c11b9f69a91cd3cfc2a84ec19d
ppc64le
nftables-1.1.1-6.el10_1.ppc64le.rpm SHA-256: f73a455260edebdb5778b1d609dbaa184ce641384e08b955e5dbe7f257ed6a9e
nftables-debuginfo-1.1.1-6.el10_1.ppc64le.rpm SHA-256: 8a7803129110dc1e7682bca5a855d75e9e900e984a88d17a42d780b36fa13efc
nftables-debugsource-1.1.1-6.el10_1.ppc64le.rpm SHA-256: 6969090d2653ee2d7803cc5abcc90c6bc9a1cf46ecbcf56a3ef238becaf35908
python3-nftables-1.1.1-6.el10_1.ppc64le.rpm SHA-256: f66ec6cd7870133ff4b5d0946b6842aafaae6eb5946c95cb8cd98ae0c1efc6fc

Red Hat Enterprise Linux for ARM 64 10

SRPM
nftables-1.1.1-6.el10_1.src.rpm SHA-256: 0f7b851cdbbd1e02fd926df1fc0f9c27268974c11b9f69a91cd3cfc2a84ec19d
aarch64
nftables-1.1.1-6.el10_1.aarch64.rpm SHA-256: e1a82e80e2926c56fc2b664896414c7507800684e4af3d517d5009641a609d08
nftables-debuginfo-1.1.1-6.el10_1.aarch64.rpm SHA-256: b74d31bd5271958ef8cc2a25721026b63d3d6f53b70976f0d33e9b37c6106cff
nftables-debugsource-1.1.1-6.el10_1.aarch64.rpm SHA-256: f78dbdbb1127d09e252639aca948a13da735b42fc7eddf562a6b7a539113f2a9
python3-nftables-1.1.1-6.el10_1.aarch64.rpm SHA-256: 0aa54b671a450e442b1497c2751a64f3e6cc616b1d4a721cc39bb210c85def2b

Red Hat CodeReady Linux Builder for x86_64 10

SRPM
x86_64
nftables-debuginfo-1.1.1-6.el10_1.x86_64.rpm SHA-256: 5cc8c4d73fee70aa716d3dd50db4b22b3004799df89667b7e472a8fa7e85c88f
nftables-debugsource-1.1.1-6.el10_1.x86_64.rpm SHA-256: 766654d78c7b69f9bfc37050e0d2be8216bbf88d62a8ef432517e1a220f1ec9a
nftables-devel-1.1.1-6.el10_1.x86_64.rpm SHA-256: 56eed91d10844b1bb4c9a6abfe6133c99f63ea60a029fb9c3974da8047ca317a

Red Hat CodeReady Linux Builder for Power, little endian 10

SRPM
ppc64le
nftables-debuginfo-1.1.1-6.el10_1.ppc64le.rpm SHA-256: 8a7803129110dc1e7682bca5a855d75e9e900e984a88d17a42d780b36fa13efc
nftables-debugsource-1.1.1-6.el10_1.ppc64le.rpm SHA-256: 6969090d2653ee2d7803cc5abcc90c6bc9a1cf46ecbcf56a3ef238becaf35908
nftables-devel-1.1.1-6.el10_1.ppc64le.rpm SHA-256: 1e71e19a289ba45bdf3c19763bf29abf00781e65a4bb09e896e1afef51bf95ff

Red Hat CodeReady Linux Builder for ARM 64 10

SRPM
aarch64
nftables-debuginfo-1.1.1-6.el10_1.aarch64.rpm SHA-256: b74d31bd5271958ef8cc2a25721026b63d3d6f53b70976f0d33e9b37c6106cff
nftables-debugsource-1.1.1-6.el10_1.aarch64.rpm SHA-256: f78dbdbb1127d09e252639aca948a13da735b42fc7eddf562a6b7a539113f2a9
nftables-devel-1.1.1-6.el10_1.aarch64.rpm SHA-256: 9413a059339530f8e2f32419f0faae6138ed94dd93e1b74ccc2525c5f0cf5564

Red Hat CodeReady Linux Builder for IBM z Systems 10

SRPM
s390x
nftables-debuginfo-1.1.1-6.el10_1.s390x.rpm SHA-256: 0b5c52be20598d4e7fe8e0924492fc0c0b4d94a68a79f5c9312f53af17134e7b
nftables-debugsource-1.1.1-6.el10_1.s390x.rpm SHA-256: e5f45d03e19930c1c28af696f908cc071ffe3326aa8bf2938b5336587da2ad44
nftables-devel-1.1.1-6.el10_1.s390x.rpm SHA-256: 3007d2c521753ae1100974e61ba67dd96420a2f5bcda448fa407fa4a36d7b97a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.