RHBA-2021:2080 - Bug Fix Advisory

Topic

An update for ovn is now available in Fast Datapath for Red Hat Enterprise
Linux 8.

Description

OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add
native support for virtual network abstractions, such as virtual L2 and L3
overlays and security groups.

Bug Fix(es) and Enhancement(s):

• [Debugging] Add coverage counters for the incremental processing engine nodes. (BZ#1890902)
• [RFE] Allow for lb_force_snat_ip on a per LB basis (BZ#1927540)
• ovn-controller (ovn2.13-20.12.0-23) is crashing when handling a deleted port binding (BZ#1932642)
• ovn-controller crashes when a container port is changed to normal port and then deleted (BZ#1936328)
• ovn-controller crashes due to use-after-free with a container logical port (BZ#1936331)
• localports leak gARP when virtual machines are directly attached to a provider network (BZ#1939470)
• [ovn] ARP responder flows for virtual ports in more than one chassis causing disruption and ARP suppression in the switches (BZ#1947823)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 8 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 8 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 8 s390x

Fixes

• BZ - 1890902 - [Debugging] Add coverage counters for the incremental processing engine nodes.
• BZ - 1927540 - [RFE] Allow for lb_force_snat_ip on a per LB basis
• BZ - 1932642 - ovn-controller (ovn2.13-20.12.0-23) is crashing when handling a deleted port binding
• BZ - 1936328 - ovn-controller crashes when a container port is changed to normal port and then deleted
• BZ - 1936331 - ovn-controller crashes due to use-after-free with a container logical port
• BZ - 1939470 - localports leak gARP when virtual machines are directly attached to a provider network
• BZ - 1947823 - [ovn] ARP responder flows for virtual ports in more than one chassis causing disruption and ARP suppression in the switches

CVEs

(none)

References

(none)