- new version 1.4.12.1 with new pkgconfig/libipq.pc
- build: abort autogen on subcommand failure
- build: strengthen check for overlong lladdr components
- build: workaround broken linux-headers on RHEL-5
- doc: clarify libxt_connlimit defaults
- doc: fix typo in libxt_TRACE
- extensions: use multi-target registration
- libip6t_dst: restore setting IP6T_OPTS_LEN flag
- libip6t_frag: restore inversion support
- libip6t_hbh: restore setting IP6T_OPTS_LEN flag
- libipq: add pkgconfig file
- libipt_ttl: document that negation is available
- libxt_conntrack: fix --ctproto 0 output
- libxt_conntrack: remove one misleading comment
- libxt_dccp: fix deprecated intrapositional ordering of !
- libxt_dccp: fix random output of ! on --dccp-option
- libxt_dccp: provide man pages options in short help too
- libxt_dccp: restore missing XTOPT_INVERT tags for options
- libxt_dccp: spell out option name on save
- libxt_dscp: restore inversion support
- libxt_hashlimit: default htable-expire must be in milliseconds
- libxt_hashlimit: observe new default gc-expire time when saving
- libxt_hashlimit: remove inversion from hashlimit rev 0
- libxt_owner: restore inversion support
- libxt_physdev: restore inversion support
- libxt_policy: remove superfluous inversion
- libxt_set: put differing variable names in directly
- libxt_set: update man page about kernel support on the feature
- libxt_string: define _GNU_SOURCE for strnlen
- libxt_string: escape the escaping char too
- libxt_string: fix space around arguments
- libxt_string: replace hex codes by char equivalents
- libxt_string: simplify hex output routine
- libxt_tcp: always print the mask parts
- libxt_TCPMSS: restore build with IPv6-less libcs
- libxt_TOS: update linux kernel version list for backported fix
- libxt_u32: fix missing allowance for inversion
- src: remove unused IPTABLES_MULTI define
- tests: add negation tests for libxt_statistic
- xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT