RHBA-2022:5446 - Bug Fix Advisory

Topic

An update for ovn is now available in Fast Datapath for Red Hat Enterprise
Linux 8.

Description

OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and security groups.

Bug Fix(es) and Enhancement(s):

• [RFE][RHOSP16.1][OVN] Neutron OVN Vlan Transparency Enhancement - support 802.1ad (BZ#1925421)
• [OVN][RFE] Add protection mechanism against gARPs / flapping ports (BZ#1947913)
• Move blocked and natted bits from ct_label to ct_mark (BZ#1957786)
• [OVN] Multicast / broadcast traffic not delivered through VXLAN tunnels (BZ#1997126)
• SB DB up field at Port_Binding table not set back to False (BZ#2037433)
• snat-ct-zone doesn't work for distributed gateway router port (BZ#2061619)
• --may-exist doesn't work well when used with --stateless (BZ#2066551)
• exempted_ext_ips for ipv6 nat doesn't take effect (BZ#2066611)
• allowed_ext_ips for dnat_and_snat doesn't work when used with stateless (BZ#2066990)
• I-P doesn't update mac-binding openflow (BZ#2069783)
• ovn-trace crashes when rejecting ICMP (BZ#2074537)
• packets from external network with size slightly greater than mtu are allowed (BZ#2075121)
• Random tempest test failures due to missing flows for metadata port (BZ#2076604)
• ovn-controller is crashing when wrong ovn-chassis-mac-mappings is configured (BZ#2082341)
• ovn-controller flushes all conntrack entries in ct zone 0 (host) (BZ#2087194)
• [OVN] The 21.12 is incompatible between minor versions (BZ#2091565)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 8 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 8 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 8 s390x
• Red Hat Enterprise Linux Fast Datapath (for RHEL for ARM 64) 8 aarch64

Fixes

• BZ - 1925421 - [RFE][RHOSP16.1][OVN] Neutron OVN Vlan Transparency Enhancement - support 802.1ad
• BZ - 1947913 - [OVN][RFE] Add protection mechanism against gARPs / flapping ports
• BZ - 1957786 - Move blocked and natted bits from ct_label to ct_mark
• BZ - 1997126 - [OVN] Multicast / broadcast traffic not delivered through VXLAN tunnels
• BZ - 2037433 - SB DB up field at Port_Binding table not set back to False
• BZ - 2061619 - snat-ct-zone doesn't work for distributed gateway router port
• BZ - 2066551 - --may-exist doesn't work well when used with --stateless
• BZ - 2066611 - exempted_ext_ips for ipv6 nat doesn't take effect
• BZ - 2066990 - allowed_ext_ips for dnat_and_snat doesn't work when used with stateless
• BZ - 2069783 - I-P doesn't update mac-binding openflow
• BZ - 2074537 - ovn-trace crashes when rejecting ICMP
• BZ - 2075121 - packets from external network with size slightly greater than mtu are allowed
• BZ - 2076604 - Random tempest test failures due to missing flows for metadata port
• BZ - 2082341 - ovn-controller is crashing when wrong ovn-chassis-mac-mappings is configured
• BZ - 2087194 - ovn-controller flushes all conntrack entries in ct zone 0 (host)
• BZ - 2091565 - [OVN] The 21.12 is incompatible between minor versions

CVEs

(none)

References

(none)