- Issued:
- 2020-10-27
- Updated:
- 2020-10-27
RHBA-2020:4356 - Bug Fix Advisory
Synopsis
ovn2.13 bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update for ovn2.13 is now available in Fast Datapath for Red Hat Enterprise Linux 7.
Description
OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and security groups.
Bug Fix(es) and Enhancement(s):
- [OVN 2.12] config the ip.dst==x.x.x.1/24 of acl,it doesn't work (BZ#1812820)
- [Debugging] ovn-ctl: Allow wrappers (valgrind) for NB and SB ovsdb-servers (BZ#1831558)
- [OVN][RFE] Add support for VXLAN tunnels for interchassis communication (BZ#1841526)
- [RFE] Need CLI support for --may-exist/--if-exists to lr-policy cmds (BZ#1845109)
- [OVN] OVN DHCP Server ignores DHCPDECLIENmessages from client (BZ#1857563)
- [OVN] Port range filtering sometimes does not allow traffic to the entire range (BZ#1858878)
- [FDP 20.F] OVN 2.13 breaks pod-pod networking across the nodes on OCP (BZ#1868392)
- OVN allows invalid CT tracked packets to be sent (BZ#1870359)
- when the system-id changes, the table chassis_private doesn't clean the old information (BZ#1873032)
- [OVN]when the nb_cfg of table chassis_private is just the range, it will not reverse to 0 next time but report error. (BZ#1873455)
- IPv6 load balancer VIP error in ovn-controller (BZ#1875337)
- [ovn-controller] "MLD Querier enabled with invalid IPv6 src address" log incorrectly displayed when IPv4 querier is enabled. (BZ#1875727)
- Logical router policy with pkt_mark is int32 resulting in overflow when a uint32 is used (BZ#1878248)
- arp response would be sent from every chassis when send arp request to external id in nat on external network (BZ#1878451)
- [OVN 2.13]qos doesn't work on localnet sometimes (BZ#1878943)
- IP multicast doesn't work across localnet ports (BZ#1886314)
Solution
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat Enterprise Linux Fast Datapath 7 x86_64
- Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7 ppc64le
- Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 7 s390x
Fixes
- BZ - 1812820 - [OVN 2.12] config the ip.dst==x.x.x.1/24 of acl,it doesn't work
- BZ - 1831558 - [Debugging] ovn-ctl: Allow wrappers (valgrind) for NB and SB ovsdb-servers
- BZ - 1841526 - [OVN][RFE] Add support for VXLAN tunnels for interchassis communication
- BZ - 1845109 - [RFE] Need CLI support for --may-exist/--if-exists to lr-policy cmds
- BZ - 1857563 - [OVN] OVN DHCP Server ignores DHCPDECLIENmessages from client
- BZ - 1858878 - [OVN] Port range filtering sometimes does not allow traffic to the entire range
- BZ - 1868392 - [FDP 20.F] OVN 2.13 breaks pod-pod networking across the nodes on OCP
- BZ - 1870359 - OVN allows invalid CT tracked packets to be sent
- BZ - 1873032 - when the system-id changes, the table chassis_private doesn't clean the old information
- BZ - 1873455 - [OVN]when the nb_cfg of table chassis_private is just the range, it will not reverse to 0 next time but report error.
- BZ - 1875337 - IPv6 load balancer VIP error in ovn-controller
- BZ - 1875727 - [ovn-controller] "MLD Querier enabled with invalid IPv6 src address" log incorrectly displayed when IPv4 querier is enabled.
- BZ - 1878248 - Logical router policy with pkt_mark is int32 resulting in overflow when a uint32 is used
- BZ - 1878451 - arp response would be sent from every chassis when send arp request to external id in nat on external network
- BZ - 1878943 - [OVN 2.13]qos doesn't work on localnet sometimes
- BZ - 1886314 - IP multicast doesn't work across localnet ports
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Fast Datapath 7
SRPM | |
---|---|
ovn2.13-20.09.0-2.el7fdp.src.rpm | SHA-256: c1e35e758d37734f593d25880c5071e83f1922ab24ef81e044b3300157ee2f78 |
x86_64 | |
ovn2.13-20.09.0-2.el7fdp.x86_64.rpm | SHA-256: 5e21b7b985be959d95bc1d15a0f47ca78c2aadffa757df0c7577a905d5a8f07f |
ovn2.13-central-20.09.0-2.el7fdp.x86_64.rpm | SHA-256: 5e07607d35ada02da218276a992382af360e620ff58311af23dcc789527f99c0 |
ovn2.13-debuginfo-20.09.0-2.el7fdp.x86_64.rpm | SHA-256: 77e2e1ba7eb1fc8e3c855fc069560bad486716c3e54d6ecc902bef4284ea6ec3 |
ovn2.13-host-20.09.0-2.el7fdp.x86_64.rpm | SHA-256: f58b834fb6fda33ebd2ce73d629b437c6d7f422253fde91de18493a0b40c94f3 |
ovn2.13-vtep-20.09.0-2.el7fdp.x86_64.rpm | SHA-256: c6a1d6e44cf04f6357da711694edbb6cdea3e301bba970d5522a6ee498a47566 |
Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7
SRPM | |
---|---|
ovn2.13-20.09.0-2.el7fdp.src.rpm | SHA-256: c1e35e758d37734f593d25880c5071e83f1922ab24ef81e044b3300157ee2f78 |
ppc64le | |
ovn2.13-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: 9847a5d0fd24910dc66c59583ff62679a6d3afa5c8aa8971171b7ab1a3e0725c |
ovn2.13-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: 9847a5d0fd24910dc66c59583ff62679a6d3afa5c8aa8971171b7ab1a3e0725c |
ovn2.13-central-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: 8bbcc0c881b30398a92409fb6531e941ae4a9964cf1815f77a2dbed616710093 |
ovn2.13-central-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: 8bbcc0c881b30398a92409fb6531e941ae4a9964cf1815f77a2dbed616710093 |
ovn2.13-debuginfo-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: b5be8868b4bdb3cc82364703fb7a7c968472934c4a97f46b62294777afd395c9 |
ovn2.13-debuginfo-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: b5be8868b4bdb3cc82364703fb7a7c968472934c4a97f46b62294777afd395c9 |
ovn2.13-host-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: ad31595950b3e81863ae3020f59e1ef4209514a8d79cc7e7e309508b7f7d5c5c |
ovn2.13-host-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: ad31595950b3e81863ae3020f59e1ef4209514a8d79cc7e7e309508b7f7d5c5c |
ovn2.13-vtep-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: c1cfb51602cd0c7d30e752be51015462e97880bf23be447381885c1e4a1ee428 |
ovn2.13-vtep-20.09.0-2.el7fdp.ppc64le.rpm | SHA-256: c1cfb51602cd0c7d30e752be51015462e97880bf23be447381885c1e4a1ee428 |
Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 7
SRPM | |
---|---|
ovn2.13-20.09.0-2.el7fdp.src.rpm | SHA-256: c1e35e758d37734f593d25880c5071e83f1922ab24ef81e044b3300157ee2f78 |
s390x | |
ovn2.13-20.09.0-2.el7fdp.s390x.rpm | SHA-256: b923f99546cab1de4d6a326650cfbb30271b0c918ee9b3f20ff9b6579304d73d |
ovn2.13-central-20.09.0-2.el7fdp.s390x.rpm | SHA-256: 7bba9df13e7b56063e10c546e64b35b1df00f34d694bb3cc3768c22629c8f8a8 |
ovn2.13-debuginfo-20.09.0-2.el7fdp.s390x.rpm | SHA-256: faef51842eb7423d247331489519cddd67c96e7c5089cc5fff49db23bff9f8a2 |
ovn2.13-host-20.09.0-2.el7fdp.s390x.rpm | SHA-256: 2e15948edcb373833912a46770314b84b300a6064d330f435ef79c4ad6366b02 |
ovn2.13-vtep-20.09.0-2.el7fdp.s390x.rpm | SHA-256: 60818fe12be763f75a0dfeedff363de83a71cdda6c6bcb815b5dcb75bd9aea95 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.