Synopsis

openstack-neutron bug fix advisory

Type/Severity

Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 8.0 (Liberty) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building a private
or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. This advisory includes packages for:

• OpenStack Networking service
  

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

This update addresses the following issues:

• Database precommit errors are sometimes inevitable due to the nature of concurrency. Precommit may issue database transactions depending on the mechanism driver, for example, certain operations on subnets and routers may interact with many other resources in a single database transaction (for example, IP allocation, ports). In addition, background operations for mechanism drivers (for example, background sync, monitoring resources periodically, among others) may touch those database tables with other requests.
  As a result of this behavior, transactions may sometimes fail during the precommit phase.
  With this update, the transaction will retry on failure, resulting in the mitigation of precommit issues. (BZ#1377518)
  
• Prior to this update, the failure mode on OVS physical bridges was not set, defaulting to `standalone`. Consequently, when the ofctl_interface was set to `native` and the interface became unavailable (due to heavy load, OVS agent shutdown, network disruption), the flows on physical bridges may have been cleared, with the physical bridge traffic being disrupted.
  With this update, the OVS physical bridge fail mode is set to `secure`. As a result, flows are retained on physical bridges. (BZ#1372370)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 8 runs on Red Hat Enterprise Linux 7.2.

The Red Hat OpenStack Platform 8 Release Notes contain the following:

• An explanation of the way in which the provided components interact to
  form a working cloud computing environment.
  
• Technology Previews, Recommended Practices, and Known Issues.
  
• The channels required for Red Hat OpenStack Platform 8, including which
  channels need to be enabled and disabled.
  

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/version-8/release-notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 8 x86_64

Fixes

• BZ - 1328506 - Vxlan tunnel to the controller is not created on a compute node after perform multiple vm autoevacuations
• BZ - 1372370 - Backport to liberty: Set secure fail mode for physical bridges
• BZ - 1376465 - Update python-networking-cisco spec to 2.1.1
• BZ - 1377518 - Allow retry on DB error for precommit

CVEs

(none)

References

(none)

Red Hat OpenStack 8

SRPM
openstack-neutron-7.1.1-7.el7ost.src.rpm	SHA-256: 2978fafdf3835cb8bcae982d75f67ec832710df7ff681c6e3cd307663c88b0bc
python-networking-cisco-2.1.1-2.el7ost.src.rpm	SHA-256: 2d74ff92341f7dd2c96ce07ddc1fa9e02a33bcb9b39de54cd1c6892518f7e483
x86_64
openstack-neutron-7.1.1-7.el7ost.noarch.rpm	SHA-256: eecc6d0e2f7c623652071a88191c1d19fdc0d75f311e8105ea9272d5cd368cc5
openstack-neutron-bigswitch-7.1.1-7.el7ost.noarch.rpm	SHA-256: 5093913359a2cd1bfd1ca9ae5aab207d4d5873d955e0bced7cac4a322995e3ea
openstack-neutron-brocade-7.1.1-7.el7ost.noarch.rpm	SHA-256: 05e048d4022eab383175558ca4ed0e5c2babd0408454bfc3d3ba630acb323d89
openstack-neutron-cisco-7.1.1-7.el7ost.noarch.rpm	SHA-256: 98e1ce9e10c41c3edde86fc7f1e48e12b9efcc34236e60b498a42fdd4ef492e8
openstack-neutron-common-7.1.1-7.el7ost.noarch.rpm	SHA-256: ccffa42cc0b47c81174c93ca189dbca79d41a16965495e05143b9d467ee4e1bd
openstack-neutron-dev-server-7.1.1-7.el7ost.noarch.rpm	SHA-256: 356120e10c5caa85edfa5006859a1f8b208e0bffd019c1134880c8653ae528c9
openstack-neutron-embrane-7.1.1-7.el7ost.noarch.rpm	SHA-256: 00d8b536f148b0f50bbecd5c24e555d5d9a2a3c3459e9f6da8f95203175487d5
openstack-neutron-linuxbridge-7.1.1-7.el7ost.noarch.rpm	SHA-256: 3e297fce95da9809615c2fc200295125814ed70d43c4cd0cfc8c17640a9dd72f
openstack-neutron-mellanox-7.1.1-7.el7ost.noarch.rpm	SHA-256: 290365f4e09a80713ed8dbfabfe40dc4bed3f87e255bc0062cc3376698b7e167
openstack-neutron-metering-agent-7.1.1-7.el7ost.noarch.rpm	SHA-256: 885b95b42992f594e99c3b3166e0dd6e632de5cc69e403601da084e460ce4d18
openstack-neutron-ml2-7.1.1-7.el7ost.noarch.rpm	SHA-256: 8a8d13d238c245f4bfcbe88b9fe2c240e1ef15ba3e9c77ae21105359c5762797
openstack-neutron-nuage-7.1.1-7.el7ost.noarch.rpm	SHA-256: 4ec927f6f2a3c257a754240332a57ac37c814a3277f4c8363caf5d91f41e6790
openstack-neutron-ofagent-7.1.1-7.el7ost.noarch.rpm	SHA-256: abbe7e6c42384407a8832c475aa97b4f5949618f9d47d3c16ab325618d28ff8a
openstack-neutron-oneconvergence-nvsd-7.1.1-7.el7ost.noarch.rpm	SHA-256: 573a3414aaf48380bd88d790885e0f5453829c21b6dd1826b0d712e72582e0ca
openstack-neutron-opencontrail-7.1.1-7.el7ost.noarch.rpm	SHA-256: 8ddc1c20733d8e78a07a3a6b6485fe553a198007cc6e83917f7ac00f49f2db36
openstack-neutron-openvswitch-7.1.1-7.el7ost.noarch.rpm	SHA-256: 3e95aac8e2fb99b6265d929279f36057dde683f366dfccfb7e51a8af7014671a
openstack-neutron-ovsvapp-7.1.1-7.el7ost.noarch.rpm	SHA-256: 3d01fe5790daa61f8cfde7f2fde0f685e97cdd38935a13fa4c13565754ceb092
openstack-neutron-rpc-server-7.1.1-7.el7ost.noarch.rpm	SHA-256: a2ed0789cc7b3467e0bc2003da0cb6863a62723cb4af8cb07f671751077884ab
openstack-neutron-sriov-nic-agent-7.1.1-7.el7ost.noarch.rpm	SHA-256: 77bbbc4e3502a17ba1a9216c2070d37e40817bfea28225ac605bde492f690279
python-networking-cisco-2.1.1-2.el7ost.noarch.rpm	SHA-256: eab9cb4732fa0ee70517c6113263ac690b3cda4b4467ea231ba11c2e36bf3f3a
python-neutron-7.1.1-7.el7ost.noarch.rpm	SHA-256: 62b84f8634c657fdf993cb43cba3f5768c6c9386755d21d42902b317f740c7c4
python-neutron-tests-7.1.1-7.el7ost.noarch.rpm	SHA-256: f613fc032801e2851aa26c9f0e2188c04bf49bdc959af1e0bd74acf5bd0760d0