Your message dated Sat, 28 Feb 2026 15:37:20 +0000
with message-id <[email protected]>
and subject line Fixed in 0.9.8-3.1+deb11u3
has caused the Debian Bug report #1063690,
regarding Segfault on latest stable nftables package on Bullseye
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1063690: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063690
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: nftables
Version: 0.9.8-3.1+deb11u2
Package: libnftables1
Version: 0.9.8-3.1+deb11u2
Since upgrade of nftables/libnftables1 from 0.9.8-3.1+deb11u1 ->
0.9.8-3.1+deb11u2, nftables segfault with this simple rules:
$ cat /etc/nftables.conf
#!/usr/sbin/nft -f
flush ruleset
table inet filter {
chain input {
type filter hook input priority 0;
}
chain forward {
type filter hook forward priority 0;
}
chain output {
type filter hook output priority 0;
}
}
include "/etc/nftables.conf.d/*.conf"
$ cat /etc/nftables.conf.d/test.conf
table inet filter {
set test {
type ipv4_addr
flags interval
elements = { 1.2.3.4/32 }
}
}
# systemctl start nftables -> segfault
# nft -cf /etc/nftables.conf -> segfault
There is no segfault with 0.9.8-3.1+deb11u1 version, only with
0.9.8-3.1+deb11u2 version.
If I move test set on nftables.conf, no problem.
Segfault only occured with set declared inside included file
I'm using a fresh bullseye install, fully up-to-date
Best regards
--- End Message ---
--- Begin Message ---
Control: fixed -1 0.9.8-3.1+deb11u3
Closing as fixed.
J.
signature.asc
Description: PGP signature
--- End Message ---
