[El-errata] ELBA-2026-56134 Oracle Linux 8 nftables bug fix and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2026-56134

http://linux.oracle.com/errata/ELBA-2026-56134.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
nftables-1.0.4-8.el8_10.i686.rpm
nftables-1.0.4-8.el8_10.x86_64.rpm
nftables-devel-1.0.4-8.el8_10.i686.rpm
nftables-devel-1.0.4-8.el8_10.x86_64.rpm
python3-nftables-1.0.4-8.el8_10.x86_64.rpm

aarch64:
nftables-1.0.4-8.el8_10.aarch64.rpm
nftables-devel-1.0.4-8.el8_10.aarch64.rpm
python3-nftables-1.0.4-8.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/nftables-1.0.4-8.el8_10.src.rpm



Description of changes:

[[1.0.4-8.el8]]
- Tree-wide use of python3 (Phil Sutter) [RHEL-179874]
- tests: shell: connect chains to hook point (Phil Sutter) [RHEL-179874]
- src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-179599]
- expression: cleanup expr_ops_by_type() and handle u32 input (Phil Sutter) [RHEL-179599]
- netlink: handle invalid etype in set_make_key() (Phil Sutter) [RHEL-179599]

[[1.0.4-7.el8]]
- xt: Fix translation error path (Phil Sutter) [RHEL-5806]

[[1.0.4-6.el8]]
- evaluate: un-break rule insert with intervals (Phil Sutter) [RHEL-62895]

[[1.0.4-5.el8]]
- xt: Fix fallback printing for extensions matching keywords (Phil Sutter) [RHEL-5806]
- xt: Fall back to generic printing from translation (Phil Sutter) [RHEL-5806]
- xt: Rewrite unsupported compat expression dumping (Phil Sutter) [RHEL-5806]
- xt: Purify enum nft_xt_type (Phil Sutter) [RHEL-5806]
- xt: Delay libxtables access until translation (Phil Sutter) [RHEL-5806]
- Warn for tables with compat expressions in rules (Phil Sutter) [RHEL-5806]

[[1.0.4-4.el8]]
- parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-2596]

[[1.0.4-3.el8]]
- spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]
- rule: check address family in set collapse (Phil Sutter) [RHEL-5160]

[[1.0.4-2.el8]]
- Add expected error records for testsuite runs (Phil Sutter) [2211076]
- tests: monitor: Summarize failures per test case (Phil Sutter) [2211076]

[[1.0.4-1.el8]]
- Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076]
- Rebase onto version 1.0.4 (Phil Sutter) [2211076]

[[0.9.3-26.el8]]
- libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287]
- src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287]
- src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287]
- rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287]
- rule: memleak in __do_add_setelems() (Phil Sutter) [2073287]
- tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924]
- mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924]

[[0.9.3-25.el8]]
- mnl: do not build nftnl_set element list (Phil Sutter) [2047821]
- tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773]
- evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773]
- evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594]
- src: support for restoring element counters (Phil Sutter) [2039594]
- netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594]