- Issued:
- 2017-06-28
- Updated:
- 2017-06-28
RHBA-2017:1594 - Bug Fix Advisory
Synopsis
openstack-neutron bug fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:
- OpenStack Networking service
OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.).
This update re-bases the OpenStack Networking service to upstream version 9.2.0 and fixes several bugs, including:
- Previously, if the master router instance received multiple SIGHUP signals in quick succession the default L3 HA implementation (namely, keepalived) sometimes set the router to 'backup'. When this occurred, L3 connectivity was disrupted until the previous backup keepalived instance took over. To work around this behavior, the OpenStack Networking L3 agent now throttles SIGHUP signals sent to keepalived to ensure that keepalived has enough time to reload configuration. This prevents keepalived from disrupting L3 connectivity on router updates with unnecessary failovers.
(BZ#1436359)
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.3.
The Red Hat OpenStack Platform 10 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 10, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack 10 x86_64
Fixes
- BZ - 1369768 - [RFE] [Neutron] SRIOV agent does not allow the co-existence of VF and PF on the same node
- BZ - 1425768 - function does not return correct create router timestamp
- BZ - 1426726 - DB Deadlock error on VLAN creations ML2 vlan allocations
- BZ - 1427330 - performance degradation in agent<->server port wiring process due to slow queries?
- BZ - 1430712 - Rebase openstack-neutron to stable/newton hash d4cc922
- BZ - 1432210 - Rebase openstack-neutron-fwaas to hash 40c81ac
- BZ - 1432220 - Rebase openstack-neutron-lbaas to 9.2.0
- BZ - 1432478 - Rebase openstack-neutron-vpnaas to hash a944153
- BZ - 1432640 - Rebase python-networking-vmware-nsx to 9.2.0
- BZ - 1432725 - Orphaned namespace for lbaas
- BZ - 1433698 - Tests in neutron.tests.tempest.api.test_revisions.TestRevisions don't clean up network resources
- BZ - 1436068 - subnet-delete fails when more than one dhcp ports are available
- BZ - 1436359 - Deleting virtual machines with floating IPs causes qrouter interfaces to be deleted and recreated
- BZ - 1440099 - Can't build RPM for patches that modify neutron setup.cfg file on 9.2.0 tag
- BZ - 1440901 - Frequent failure at Subnet deletion with 3 controller
- BZ - 1441651 - DVR L3 Agent Requires Two Restarts to Populate Removed Routes
- BZ - 1444536 - python-networking-bigswitch package version in OSP9 is higher than the one in OSP10 or OSP11
- BZ - 1450223 - Port failed to bind because openvswitch agent dies.
- BZ - 1452703 - Rebase openstack-neutron-fwaas to f571e2
- BZ - 1452706 - Rebase openstack-neutron-lbaas to b93597
- BZ - 1452749 - Rebase openstack-neutron-vpnaas to 43b2a2
- BZ - 1454402 - Rebase python-networking-vmware-nsx to b44005
- BZ - 1454441 - Rebase python-networking-bigswitch to 08547f
- BZ - 1454448 - Rebase openstack-neutron to 85c9da
- BZ - 1455217 - OSP9 -> OSP10 upgrade fails during major-upgrade-pacemaker.yaml with sqlalchemy.exc.ProgrammingError: (pymysql.err.ProgrammingError) (1146, u"Table 'ovs_neutron.bsn_routerrules' doesn't exist")
CVEs
(none)
References
(none)
Red Hat OpenStack 10
SRPM | |
---|---|
openstack-neutron-9.3.1-2.el7ost.src.rpm | SHA-256: 1124821328e6c321f6a19bde5cecff666f74efa95786e44086b0faea6f77f924 |
openstack-neutron-fwaas-9.0.1-1.el7ost.src.rpm | SHA-256: ff0116d4422a78491756fd63bad5b8d255fca021453e761faa81716cc0828069 |
openstack-neutron-lbaas-9.2.0-2.el7ost.src.rpm | SHA-256: 25ff0be22d99cd63102e9378d84342a68438c75f78f95bda1cffc3f60e41873f |
openstack-neutron-vpnaas-9.0.0-3.el7ost.src.rpm | SHA-256: 0c1fdac9e34e31b665267bd0df58ac641a98b37a405aa383650f3b14ec50eb35 |
python-networking-bigswitch-9.42.1-3.el7ost.src.rpm | SHA-256: 3041613882a6f16b475d94d8952c2d72ce993020520ed8dc7f4cd462f87b603d |
python-networking-vmware-nsx-9.2.0-2.el7ost.src.rpm | SHA-256: 68e8fecf78f2f3cedaf11a6c37c4eac1e0103b9d3fca1c8c4b8f99bbde9260d1 |
x86_64 | |
openstack-neutron-9.3.1-2.el7ost.noarch.rpm | SHA-256: c853973e5d5d5d8632f45a6879a845a13651a4462edc8fe316674002958889f2 |
openstack-neutron-bigswitch-agent-9.42.1-3.el7ost.noarch.rpm | SHA-256: 0a509fc73fa41faab05ade28290f4bd987249e07bd362529e0b748366899edb9 |
openstack-neutron-bigswitch-lldp-9.42.1-3.el7ost.noarch.rpm | SHA-256: 92f1f768a9824ac000ec15f89a84ece59c42628658672eb885edfb3756797b89 |
openstack-neutron-common-9.3.1-2.el7ost.noarch.rpm | SHA-256: fae85df79056a51ed2be538aac0edf37e010d0cd219cc1a3e328b04c02296fdc |
openstack-neutron-fwaas-9.0.1-1.el7ost.noarch.rpm | SHA-256: 2211b9c0579f875814cdfc4496004a0e992533b47c828e7fa87d9a0b1cf40e50 |
openstack-neutron-lbaas-9.2.0-2.el7ost.noarch.rpm | SHA-256: 97fd00ea25b72c66ae99b264ff4b795ab725a7780306ac448e5afbc296d3fd64 |
openstack-neutron-linuxbridge-9.3.1-2.el7ost.noarch.rpm | SHA-256: 54075c5a2a9b9aed252d2015d2409602496b63f809ae2a11011bbbc6cea1b557 |
openstack-neutron-macvtap-agent-9.3.1-2.el7ost.noarch.rpm | SHA-256: 0b89763648520ff845ec6fcc75c46c11736c63f6e7abc126fef706085b3e53e6 |
openstack-neutron-metering-agent-9.3.1-2.el7ost.noarch.rpm | SHA-256: 27801ae30c6b0a203916a05805818cd510a1289a28dd7e0692eb38799be832fa |
openstack-neutron-ml2-9.3.1-2.el7ost.noarch.rpm | SHA-256: 679ae89b2f7eb1fdf97f1e0a6d9dfff8210ed492650888961cdbc51cbc9e8b61 |
openstack-neutron-openvswitch-9.3.1-2.el7ost.noarch.rpm | SHA-256: 703f25e6ce4ed4e3a1a732302740a48b2dea6c4a7ca86d331c91c3a38dbfc0ab |
openstack-neutron-rpc-server-9.3.1-2.el7ost.noarch.rpm | SHA-256: 8be969420b6ce663f27b98e2c87dfbf4e94fde1d84e2562e903dd3bd0a0f01e5 |
openstack-neutron-sriov-nic-agent-9.3.1-2.el7ost.noarch.rpm | SHA-256: 1adf173dd9967d0836a7542e89e63013738e4c281564287d57f698b08705cec5 |
openstack-neutron-vpnaas-9.0.0-3.el7ost.noarch.rpm | SHA-256: c7b82229ef44c90ef82377273b48dd14861094d34d29f93a6ab34cc8bfc92806 |
openstack-neutron-vyatta-agent-9.0.0-3.el7ost.noarch.rpm | SHA-256: 1a8b9751e756cdfd67df186c1a080c54462976879243f7128eee2426ff292757 |
python-networking-bigswitch-9.42.1-3.el7ost.noarch.rpm | SHA-256: 3c72113fe829c63fb6245760caea3cdb58bd60bd9f98b46bd3ff46e580fc2e43 |
python-networking-vmware-nsx-9.2.0-2.el7ost.noarch.rpm | SHA-256: 419e19753f41ca51f859936be5b83b05c90b790377ab794f18d4647a2018f524 |
python-neutron-9.3.1-2.el7ost.noarch.rpm | SHA-256: 194c5fe77da69971a9d128ea39d40aebb858825d43c3fe5e9ee95e4465cc9c23 |
python-neutron-fwaas-9.0.1-1.el7ost.noarch.rpm | SHA-256: ddfc20fb5e3360d5ae8524c79f5664ec626636c80639054c29594cbc29fd1ae1 |
python-neutron-fwaas-tests-9.0.1-1.el7ost.noarch.rpm | SHA-256: 778e5fbf923643d89d028e02bfaf953c380810af56976afa487cf14556330e07 |
python-neutron-lbaas-9.2.0-2.el7ost.noarch.rpm | SHA-256: 6cbfc50be869815631c9b289c064dcabb9051505583973488d9981e951747e19 |
python-neutron-lbaas-tests-9.2.0-2.el7ost.noarch.rpm | SHA-256: 320ed988239327758169a46b0829746389595f19cb26467083d3a702636e6da6 |
python-neutron-tests-9.3.1-2.el7ost.noarch.rpm | SHA-256: 3c2000f39d54f71fac54d07dff3e51c19b9f23776a5c8556cb36a4c9a0b2713d |
python-neutron-vpnaas-9.0.0-3.el7ost.noarch.rpm | SHA-256: 0c0c13cad656687f4a4aeb09a06020117b1ae48c938709febd99ed502b4d5434 |
python-neutron-vpnaas-tests-9.0.0-3.el7ost.noarch.rpm | SHA-256: 69cc76a1c21f1d55ffbb5328e1b5e51b540f3f3613908a58a58074359e9b5649 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.