libxtables: Fix unsupported extension warning corner case
tests: shell: Check overhead in iptables-save and -restore
nft: Fix EPERM handling for extensions without rev 0
Improve error messages for unsupported extensions
xshared: Fix response to unprivileged users
libxtables: Register only the highest revision extension
Use proto_to_name() from xshared in more places
libxtables: Boost rule target checks by announcing chain names
libxtables: Implement notargets hash table
nft: Reject standard targets as chain names when restoring
xshared: Merge and share parse_chain()
xshared: Prefer xtables_chain_protos lookup over getprotoent
nft: Speed up immediate parsing
nft: Simplify immediate parsing

extensions: hashlimit: Fix tests with HZ=1000

extensions: hashlimit: Fix tests with HZ=100
ebtables: Dump atomic waste
doc: ebtables-nft.8: Adjust for missing atomic-options

extensions: SECMARK: Use a better context in test case
extensions: sctp: Translate --chunk-types option
extensions: sctp: Fix nftables translation
extensions: SECMARK: Implement revision 1
nft: cache: Retry if kernel returns EINTR

Fix for rpminspect results

xtables-translate: Fix translation of odd netmasks
nft: Fix bitwise expression avoidance detection
xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
xtables-monitor: print packet first
xtables-monitor: fix packet family protocol
xtables-monitor: fix rule printing
xtables-monitor: Fix ip6tables rule printing

extensions: dccp: Fix for DCCP type 'INVALID'
tests: shell: Merge and extend return codes test
nft: Fix command name in ip6tables error message
extensions: libxt_CT: add translation for NOTRACK
extensions: libipt_icmp: Fix translation of type 'any'
tests/shell: Test for fixed extension registration
libxtables: Register multiple extensions in ascending order
libxtables: Simplify pending extension registration
libxtables: Make sure extensions register in revision order

tests/shell: Add test for bitwise avoidance fixes
ebtables: Optimize masked MAC address matches
nft: Optimize class-based IP prefix matches
nft: Fix for broken address mask match detection
nft: cache: Make nft_rebuild_cache() respect fake cache
tests: shell: Improve concurrent noflush restore test a bit
nft: Fix for concurrent noflush restore calls
nft: Fix error reporting for refreshed transactions
nft: Make batch_add_chain() return the added batch object

Ignore sysctl files not suffixed '.conf'

nft: Fix for '-F' in iptables dumps
tests: shell: Test -F in dump files

Fix for endless loop in iptables-restore --test

Unbreak nfnl_osf tool

Complete ebtables-nft among match support
Replace RHEL-only xtables-monitor fix with upstream solution
xtables: Align effect of -4/-6 options with legacy
xtables: Drop -4 and -6 support from xtables-{save,restore}
Review systemd unit files

Fix for iptables-restore segfault under pressure
Fix for iptables-save segfault under pressure

iptables-test.py: Fix --host mode
xtables-monitor: Fix segfault when tracing

xtables-translate: Fix for iface++
tests: shell: Fix skip checks with --host mode
xtables-restore: fix for --noflush and empty lines