geoip/xt_geoip_dl | 7 7 + 0 - 0 !
1 file changed, 7 insertions(+)

 download the csv database provided by db-ip.com, the same
 file required by the "build script".
 .
 Upstream now uses db-ip.com too, so we just retain the fall-back to
 last month.

geoip/Makefile.am | 2 1 + 1 - 0 !
geoip/xt_geoip_fetch_maxmind | 95 0 + 95 - 0 !
2 files changed, 1 insertion(+), 96 deletions(-)

 remove superfluous xt_geoip_fetch_maxmind script.
 .
 xt_geoip_fetch and xt_geoip_fetch_maxmind are identical.  Remove the
 latter.

geoip/xt_geoip_fetch.1 | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix man-page typo'.

geoip/Makefile.am | 4 3 + 1 - 0 !
geoip/xt_geoip_build_maxmind.1 | 40 40 + 0 - 0 !
geoip/xt_geoip_dl_maxmind.1 | 22 22 + 0 - 0 !
3 files changed, 65 insertions(+), 1 deletion(-)

 add man-pages for maxmind scripts.

geoip/xt_geoip_dl_maxmind | 11 10 + 1 - 0 !
1 file changed, 10 insertions(+), 1 deletion(-)

 use correct download url for
 MaxMind DB's.
 .
 The download URL for the GeoLite2 DB's has changed and includes a
 licence-key.  Update the download script to read the key from file or
 stdin and use the correct URL.

extensions/xt_ECHO.c | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

 pass correct argument to `security_skb_classify_flow`
 The second parameter was changed in 5.11.  This change has since
 been back-ported to 5.10.121 and included in Debian 11.4.
 .
 This patch contains the upstream fix.