- Issued:
- 2022-01-10
- Updated:
- 2022-01-10
RHBA-2022:0049 - Bug Fix Advisory
Synopsis
ovn bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
Topic
An update for ovn is now available in Fast Datapath for Red Hat Enterprise
Linux 8.
Description
OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add
native support for virtual network abstractions, such as virtual L2 and L3
overlays and security groups.
Bug Fixes and Enhancements:
- Wrong source ip is used if an external gateway and an instance with floating ip is located in the same node (BZ#1960096)
- Existing FDB flows are not added when ovn-controller claims the first logical port of a logical switch (BZ#1983111)
- [OVN SCALE] Optimize load balancer configuration with load balancer groups (BZ#2001528)
- ovn does not handle traceroute for floating IPs correctly (BZ#2006349)
- [ovn-trace] OVN trace doesn't set ct_state for ct_nat not preceded by ct_next (BZ#2017540)
- [OVN SCALE] Fix flow explosion seen in L2_IN_L2_LKUP stage when a router connected to a logical switch has lots of LBs and VIPS. (BZ#2020710)
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
Affected Products
- Red Hat Enterprise Linux Fast Datapath 8 x86_64
- Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 8 ppc64le
- Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 8 s390x
Fixes
- BZ - 1960096 - Wrong source ip is used if an external gateway and an instance with floating ip is located in the same node
- BZ - 1983111 - Existing FDB flows are not added when ovn-controller claims the first logical port of a logical switch
- BZ - 2001528 - [OVN SCALE] Optimize load balancer configuration with load balancer groups
- BZ - 2006349 - ovn does not handle traceroute for floating IPs correctly
- BZ - 2017540 - [ovn-trace] OVN trace doesn't set ct_state for ct_nat not preceded by ct_next
- BZ - 2020710 - [OVN SCALE] Fix flow explosion seen in L2_IN_L2_LKUP stage when a router connected to a logical switch has lots of LBs and VIPS.
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Fast Datapath 8
| SRPM | |
|---|---|
| ovn-2021-21.09.1-23.el8fdp.src.rpm | SHA-256: c5cad7e81191f24f42509ac8811a94c27c71b6056bd6391fd077de62ec939478 |
| x86_64 | |
| ovn-2021-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: 5621f445773a44a743596df8333ecf6367bd0c7880e0ae3c8165ad843e730968 |
| ovn-2021-central-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: 367fa5366c013dcf244c4aa2b20aa76dbbc6633c6633b42ac35a147f64884b5b |
| ovn-2021-central-debuginfo-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: 2f44c26880dba671ef49b574031ac74589385c1bef04a86e88314fa70e930b81 |
| ovn-2021-debuginfo-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: e1baa9437f38d935378c2fe2da13788d75010e3521d2771330a143cc164b1261 |
| ovn-2021-debugsource-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: 96c050ee6a180243be1120c4419875924c3ee071be375df401f67ecab23584ee |
| ovn-2021-host-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: 571e4ed17caaa12921a5164e120167fb6e592af7479bdc9e37ea2b26c9034975 |
| ovn-2021-host-debuginfo-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: 5424a3cdd4daa1a343f9252db02df797dbcdccb6286a6848e6b1a49a506efb8f |
| ovn-2021-vtep-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: 03834cca9ec6ff5dc566f14f33ea3b2a84af23aaa2afec70ee46bf878518f0d1 |
| ovn-2021-vtep-debuginfo-21.09.1-23.el8fdp.x86_64.rpm | SHA-256: 74daf504d267d67f48b19979f45d8ab1a8b0212c816acfcb6293a1e1c88a59d0 |
Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 8
| SRPM | |
|---|---|
| ovn-2021-21.09.1-23.el8fdp.src.rpm | SHA-256: c5cad7e81191f24f42509ac8811a94c27c71b6056bd6391fd077de62ec939478 |
| ppc64le | |
| ovn-2021-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: 3c6e8c707f3d8f009eb13d077fe3581a5f4fc0445b1f3482b60b653ddcb40cbb |
| ovn-2021-central-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: 2832e57b36423bf999fcbf95a84270aa60d58f5317a0b1992d1132e200adaccc |
| ovn-2021-central-debuginfo-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: 5951bec24e18490a5efc7a15fea0787980403d487accb6aa6cadd6e098a8fe0b |
| ovn-2021-debuginfo-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: c13c55226d9246350356b3436b2c4efc7ae8d090db705cda1e0524b7ee0dd451 |
| ovn-2021-debugsource-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: e24f8ac0029069a008cac0bf36ece43b82afc914b82a2ac0376a46225a7988bc |
| ovn-2021-host-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: fabf0cc1a60489577db1ff177e896388584a48b616cf124ccef44b39bcaa8690 |
| ovn-2021-host-debuginfo-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: ab5787fd25373236125dbc751c70b22a4aa6051f0c10e9a737477bbaeb7f5ea8 |
| ovn-2021-vtep-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: 63c2e7e114a1a5dfd83144c0c53741820b2a7555f422f96c4f715c8795bd1146 |
| ovn-2021-vtep-debuginfo-21.09.1-23.el8fdp.ppc64le.rpm | SHA-256: 0489e72be4cf8c8c7f9242cd06f17fb88bb1b07963beb4ee6ed83ca7771fb3f1 |
Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 8
| SRPM | |
|---|---|
| ovn-2021-21.09.1-23.el8fdp.src.rpm | SHA-256: c5cad7e81191f24f42509ac8811a94c27c71b6056bd6391fd077de62ec939478 |
| s390x | |
| ovn-2021-21.09.1-23.el8fdp.s390x.rpm | SHA-256: 20e4b0f07580101c721d90a81b1de944887a9071f35095cc9c787c3c277aef14 |
| ovn-2021-central-21.09.1-23.el8fdp.s390x.rpm | SHA-256: fc2bb23a9a4ba9a77bacfb7cbd72530dec66acba5368026942bed3781afbd1a3 |
| ovn-2021-central-debuginfo-21.09.1-23.el8fdp.s390x.rpm | SHA-256: 496c49e7e1fd8f22ad31012a10ac8614f1602a4bf94a3d7ac7fc0927e68dee66 |
| ovn-2021-debuginfo-21.09.1-23.el8fdp.s390x.rpm | SHA-256: cf3babe9e62b4f9aca914477fffd26eb535e66e89ce64e9a99fe5d3a1a4c437e |
| ovn-2021-debugsource-21.09.1-23.el8fdp.s390x.rpm | SHA-256: 1e7beadd1f65c6916cf636d93926441ac26a069195e5f3532f9884feb0989959 |
| ovn-2021-host-21.09.1-23.el8fdp.s390x.rpm | SHA-256: 55cf8e273bb1601198c2e3eda0c1b794edff4583856b5bc18890a934997aed52 |
| ovn-2021-host-debuginfo-21.09.1-23.el8fdp.s390x.rpm | SHA-256: 8a997fbeab303bab9865a04547eab6dd12a6497461fff226b65d33e7151ce87e |
| ovn-2021-vtep-21.09.1-23.el8fdp.s390x.rpm | SHA-256: b0a4545f90a5c71e1a72add9275f2c41ba0419c79018bd1265b3b30be603e71a |
| ovn-2021-vtep-debuginfo-21.09.1-23.el8fdp.s390x.rpm | SHA-256: 20755fbe95bf19f560ccb4a7f926459b27bbc5c94d86af4837c454c4a380c37c |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.