- Issued:
- 2018-03-15
- Updated:
- 2018-03-15
RHBA-2018:0537 - Bug Fix Advisory
Synopsis
openstack-neutron bug fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 9.0 (Mitaka) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building a private
or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. This advisory includes packages for:
- OpenStack Networking service
OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)
This update addresses the following issue:
- When multiple API requests that allocate IP addresses in the same subnet are issued, sometimes the IPAM layer raises a duplicate error. Previously, when this happened, the API layer would not retry the allocation; instead it bubbled up the error as HTTP error code 5xx to the API consumer. Consequently, API requests would sometimes fail with error code 5xx.
With this update, the Neutron API layer now retries all duplicate errors. This allows the IPAM layer to allocate a new, unused address, and successfully fulfil the API request. As a result, when the IPAM layer hits a duplicate error from allocating two addresses from the same subnet at the same time, no 5xx errors are bubbled up to the API consumers.
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 9 runs on Red Hat Enterprise Linux 7.4.
The Red Hat OpenStack Platform 9 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 9, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/9/paged/release-notes
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack 9 x86_64
Fixes
- BZ - 1508091 - Bug in L3 agent code while cleaning up a router namespace
- BZ - 1513850 - OVS timeout while adding router ports
- BZ - 1523853 - Sometimes TestSimpleInterfaceMonitor.test_get_events functional test fails
- BZ - 1531143 - Network on controllers is down due to neutron-ovs-cleanup failure
- BZ - 1533592 - Neutron ERROR DBDuplicateEntry ipallocations
- BZ - 1533885 - VXLAN port type cast error - impossible to change VXLAN port from defaults in neutron-openvswitch-agent
- BZ - 1535623 - tempest scenario 'test_network_v6' tests fail because router address sometimes is incorrectly deallocated
- BZ - 1548097 - neutron-lbaas provides entry point for test shipped in neutron-lbaas-tests package
CVEs
(none)
References
(none)
Red Hat OpenStack 9
SRPM | |
---|---|
openstack-neutron-8.4.0-17.el7ost.src.rpm | SHA-256: 7858c350e15ac9fbd3fe6e31573328816ce174681c60495effd51366dd07425f |
openstack-neutron-lbaas-8.4.0-4.el7ost.src.rpm | SHA-256: 8ac40198275fc4b04a53c10dae4691af2cd0b9fa55db96313fb15c4e47e9e7ef |
x86_64 | |
openstack-neutron-8.4.0-17.el7ost.noarch.rpm | SHA-256: e2ff7dc7453005d8c655d2dfe670a0dda8ea4ff629c5c5256be82b3e7af91061 |
openstack-neutron-bgp-dragent-8.4.0-17.el7ost.noarch.rpm | SHA-256: a68820df359c905026f0428d79e92983c1799a0d31fa944065ef8983e0911ab9 |
openstack-neutron-common-8.4.0-17.el7ost.noarch.rpm | SHA-256: 657ae8ab60dc1a39a903927106394a843eeef1af06ba256c0a9583818a22f2ea |
openstack-neutron-lbaas-8.4.0-4.el7ost.noarch.rpm | SHA-256: 825af18e60b91ac2e0e4c70eb552cc382bcec9e2b29b19ab3e37957e5ae62504 |
openstack-neutron-linuxbridge-8.4.0-17.el7ost.noarch.rpm | SHA-256: 28f9aa570dd578356c92c8970d48d8a564eaf9a740df345615a32883594d88b1 |
openstack-neutron-macvtap-agent-8.4.0-17.el7ost.noarch.rpm | SHA-256: 82019aa282da7ea479001e2519e2f9820b5aeeb88d1376d890fba21030b76e6c |
openstack-neutron-metering-agent-8.4.0-17.el7ost.noarch.rpm | SHA-256: 25f234439cba03d6863bb47e96f7cb4138bcf2277d63e17f3559577ad69d5628 |
openstack-neutron-ml2-8.4.0-17.el7ost.noarch.rpm | SHA-256: 884ed104838963f0592258d87c8b43eb3082d1637cd91c49291d1cb7c83a6a7a |
openstack-neutron-openvswitch-8.4.0-17.el7ost.noarch.rpm | SHA-256: f64adc20e5fadd3f8e10db85c0e34113c87903f48f2006f8f9d743d3392e71b3 |
openstack-neutron-rpc-server-8.4.0-17.el7ost.noarch.rpm | SHA-256: d271902f619117ab2576b54cab1dcfafbe064bf2874d624a3f2d2ec526c09308 |
openstack-neutron-sriov-nic-agent-8.4.0-17.el7ost.noarch.rpm | SHA-256: f74ec9e9db50fe616299deeac180322237168e321ec96935197ab4501694df3f |
python-neutron-8.4.0-17.el7ost.noarch.rpm | SHA-256: 2eecd083d34319824be905fb7152fb0574ae22e7223ae55a056b2b6c182e07c8 |
python-neutron-lbaas-8.4.0-4.el7ost.noarch.rpm | SHA-256: 25689862a5eccf2c7b14eea4ca6baac5eeb890e05570a84e16fb86f68dc63f15 |
python-neutron-lbaas-tests-8.4.0-4.el7ost.noarch.rpm | SHA-256: 9bc0370ca299acb233dfd619f817fe77d54d3ffe8cfbc67b549be3128089010a |
python-neutron-tests-8.4.0-17.el7ost.noarch.rpm | SHA-256: 2e853184702c550fd1c8abb6df2e946d45f92075af73f5b724bb4e90a3a76c84 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.