Issued:
2021-02-03
Updated:
2021-02-03

RHBA-2021:0407 - Bug Fix Advisory

Synopsis

ovn2.13 bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for ovn2.13 is now available in Fast Datapath for Red Hat Enterprise Linux 7.

Description

OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and security groups.

  • RFE: support ECMP for logical router policies (BZ#1881826)
  • [RFE] Add support for reject action when load balancer has no endpoints (BZ#1883957)
  • Need a way to avoid host and OVN GR source port collision when doing SNAT (BZ#1892311)
  • ovn-controller: pinctrl may segfault when SB transaction is not available. (BZ#1901880)
  • ovn-controller: always_learn_from_arp_request support broken for self originated GARPs. (BZ#1903199)
  • [OVN-SCALE] ovn-controller: Optimize openflow generation for Load Balancer hairpin flows. (BZ#1903224)
  • systen-ovn.at: Load balancer health checks always fails (BZ#1904489)
  • [ovn] Missing/wrong openflow rules after ofport change (BZ#1908391)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Fast Datapath 7 x86_64
  • Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7 ppc64le
  • Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 7 s390x

Fixes

  • BZ - 1881826 - RFE: support ECMP for logical router policies
  • BZ - 1883957 - [RFE] Add support for reject action when load balancer has no endpoints
  • BZ - 1892311 - Need a way to avoid host and OVN GR source port collision when doing SNAT
  • BZ - 1901880 - ovn-controller: pinctrl may segfault when SB transaction is not available.
  • BZ - 1903199 - ovn-controller: always_learn_from_arp_request support broken for self originated GARPs.
  • BZ - 1903224 - [OVN-SCALE] ovn-controller: Optimize openflow generation for Load Balancer hairpin flows.
  • BZ - 1904489 - systen-ovn.at: Load balancer health checks always fails
  • BZ - 1908391 - [ovn] Missing/wrong openflow rules after ofport change

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Fast Datapath 7

SRPM
ovn2.13-20.12.0-1.el7fdp.src.rpm SHA-256: d5d160e4828b2fd79df9cf0f1a7885fd377e011f80c40680f8f61947d5d81554
x86_64
ovn2.13-20.12.0-1.el7fdp.x86_64.rpm SHA-256: 8b4c7361acb280759e9772e79df845c765ef9e132afb2a1042acd80cda8d9c47
ovn2.13-central-20.12.0-1.el7fdp.x86_64.rpm SHA-256: 096880e62bbdfd8bb0ff73ba95d0dfc799855fb5c351ebac1c14283a74408079
ovn2.13-debuginfo-20.12.0-1.el7fdp.x86_64.rpm SHA-256: ca175f6b1a282100a4b84d5679d5977a9a35ec067aaae1e22277e7ea5b611f8b
ovn2.13-host-20.12.0-1.el7fdp.x86_64.rpm SHA-256: 02b4e2eaf5a6e1425b6f01322ebc79cf222bc10a508a47c6d6e8dcd0b9f6f69e
ovn2.13-vtep-20.12.0-1.el7fdp.x86_64.rpm SHA-256: e1199c8122b1b34c0ffc8d7a889b7a850b6e11d5e618b5ad64539f55045967bd

Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7

SRPM
ovn2.13-20.12.0-1.el7fdp.src.rpm SHA-256: d5d160e4828b2fd79df9cf0f1a7885fd377e011f80c40680f8f61947d5d81554
ppc64le
ovn2.13-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: 8c1d1fb95041a9adee2a5bcf11fb81c721d8cec614466ee833833416b5b7026c
ovn2.13-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: 8c1d1fb95041a9adee2a5bcf11fb81c721d8cec614466ee833833416b5b7026c
ovn2.13-central-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: e7becf4a5bd48d37a314ea6e9c757a529b321263408c4971170464a8c2d9cb38
ovn2.13-central-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: e7becf4a5bd48d37a314ea6e9c757a529b321263408c4971170464a8c2d9cb38
ovn2.13-debuginfo-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: 336894680916320e94209f11eab295680a8599e3a9916ab84013c2d8bd181870
ovn2.13-debuginfo-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: 336894680916320e94209f11eab295680a8599e3a9916ab84013c2d8bd181870
ovn2.13-host-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: 488656277219bbdf4b53bb1cad73b7a0de780eef3f66230482900b70ee3f284f
ovn2.13-host-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: 488656277219bbdf4b53bb1cad73b7a0de780eef3f66230482900b70ee3f284f
ovn2.13-vtep-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: bba482bf55175ee8de272753390c424635b498e78bc18ea3150df1a1e00ee3ae
ovn2.13-vtep-20.12.0-1.el7fdp.ppc64le.rpm SHA-256: bba482bf55175ee8de272753390c424635b498e78bc18ea3150df1a1e00ee3ae

Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 7

SRPM
ovn2.13-20.12.0-1.el7fdp.src.rpm SHA-256: d5d160e4828b2fd79df9cf0f1a7885fd377e011f80c40680f8f61947d5d81554
s390x
ovn2.13-20.12.0-1.el7fdp.s390x.rpm SHA-256: d58a3dbca7ae823d46be00bbf72109181162a2b07ab5141e4601c4cb8a93d513
ovn2.13-central-20.12.0-1.el7fdp.s390x.rpm SHA-256: 0542dc442ca927fc271d82f74b55733006f15f17de638837b5da3ccef8aa0171
ovn2.13-debuginfo-20.12.0-1.el7fdp.s390x.rpm SHA-256: c8cb8ce6cc307d43e1fee31545e088ec62393a673d14cf41fa177c08030bbacc
ovn2.13-host-20.12.0-1.el7fdp.s390x.rpm SHA-256: 86c6c2acab8f6f2d62119188d8a1bf7b0fd5a14e6115cf9cad38bd71e8742200
ovn2.13-vtep-20.12.0-1.el7fdp.s390x.rpm SHA-256: 790e62c10266a6ece7918e98947ff3acb4f1bf813d5a88009e706eb462ffeabf

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.