RHBA-2017:3066 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 8.0 (Liberty) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building a private
or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. This advisory includes packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

This update addresses the following issue:

• At present, dnsmasq does not support an IPv6 subnet range with a mask lower than 64 bits. Consequently, as the neutron API is backend agnostic, there is no validation when creating/updating an IPv6 subnet with mask lower than 64 bits; `create` and `update` API actions return `200 OK` even when such an IPv6 network is used. In the event that a network has both IPv4 and IPv6 networks (in the case of having dnsmasq as a driver for the DHCP agent) the driver will ignore the unsupported IPv6 range, and will spawn dnsmasq handling for the IPv4 network only. As a result, the IPv6 subnets with a mask lower than 64 bits are not provided with DHCPv6 service. (BZ#1489072)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 8 runs on Red Hat Enterprise Linux 7.4.

The Red Hat OpenStack Platform 8 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 8, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/8/paged/release-notes

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat OpenStack 8 x86_64

Fixes

• BZ - 1478116 - Unable to manage load balancer V2 quotas with neutron quota-update command
• BZ - 1478714 - Functional tests "l3 agent ha router" fail after switching to RHEL 7.4
• BZ - 1482671 - Unable to manage load balancer V2 quotas with neutron quota-update command
• BZ - 1484283 - Keepalived v1.3.5 failing to assign IP for HA interface
• BZ - 1489072 - iptables manager may fail to apply firewall rules if another iptables* process is being executed

CVEs

(none)

References

(none)