RHBA-2020:1458 - Bug Fix Advisory

Topic

An update for ovn2.11 is now available in the Fast Datapath channel of Red Hat Enterprise Linux 7.

Description

OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and security groups.

Bug fix(es) and Enhancement(s):

• [OVN] some icmp packets are passing through controller when pinging VM FIP in DVR environment (BZ#1788193)
• [OVN 2.11][FDP20.B] QoS Max bandwidth limit doesn't work in combination with DVR (BZ#1797873)
• [OVN] MAC anti-spoof filtering still works if port_security is disabled (BZ#1805709)
• OVN is not adhering to DHCP Broadcast Bit in DHCPDISCOVER and sending only unicast DHCPOFFER (BZ#1811119)
• Health check for load balancer is broken if ACLs are defined (BZ#1813050)
• [OVN] ARP requests not forwarded to chassis owning the logical port behind FIP in DVR scenarios. (BZ#1816620)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 7 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 7 s390x

Fixes

• BZ - 1788193 - [OVN] some icmp packets are passing through controller when pinging VM FIP in DVR environment
• BZ - 1797873 - [OVN 2.11][FDP20.B] QoS Max bandwidth limit doesn't work in combination with DVR
• BZ - 1805709 - [OVN] MAC anti-spoof filtering still works if port_security is disabled
• BZ - 1811119 - OVN is not adhering to DHCP Broadcast Bit in DHCPDISCOVER and sending only unicast DHCPOFFER
• BZ - 1813050 - Health check for load balancer is broken if ACLs are defined
• BZ - 1816620 - [OVN] ARP requests not forwarded to chassis owning the logical port behind FIP in DVR scenarios.

CVEs

(none)

References

(none)