RHBA-2022:9044 - Bug Fix Advisory

Topic

An update for ovn2.13 is now available in Fast Datapath for Red Hat
Enterprise Linux 7.

Description

OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add
native support for virtual network abstractions, such as virtual L2 and L3
overlays and security groups.

Bug Fix(es) and Enhancement(s):

• VLAN Transparency: packets dropped with flat provider network (BZ#1914816)
• [OSP 16.1][neutron][ovn] - FIP to FIP communication broken when multiple subnets exist on the floating IP network and floating IP's subnet is different than router's subnet (BZ#1929901)
• OVN should handle DNAT collisions by SNAT'ing port (BZ#1939676)
• VLAN Transparency: IPv6 packets dropped when port security enabled (BZ#1951112)
• [ovn] dnat_snat traffic becomes centralized during VIP failover (BZ#1952961)
• [scale] northd: precompute router load balancer IPs (BZ#1962338)
• ECMP routes with invalid next hops still result in OF groups getting programmed (BZ#1978796)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 7 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 7 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 7 s390x

Fixes

• BZ - 1914816 - VLAN Transparency: packets dropped with flat provider network
• BZ - 1929901 - [OSP 16.1][neutron][ovn] - FIP to FIP communication broken when multiple subnets exist on the floating IP network and floating IP's subnet is different than router's subnet
• BZ - 1939676 - OVN should handle DNAT collisions by SNAT'ing port
• BZ - 1951112 - VLAN Transparency: IPv6 packets dropped when port security enabled
• BZ - 1952961 - [ovn] dnat_snat traffic becomes centralized during VIP failover
• BZ - 1962338 - [scale] northd: precompute router load balancer IPs
• BZ - 1978796 - ECMP routes with invalid next hops still result in OF groups getting programmed

CVEs

(none)

References

(none)