RHBA-2023:2190 - Bug Fix Advisory

Topic

An update for nmstate is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.2 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
• Red Hat CodeReady Linux Builder for x86_64 9 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
• Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
• Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x
• Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.2 x86_64
• Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.2 ppc64le
• Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.2 s390x
• Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.2 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

• BZ - 1966944 - changing a veth peer name, the old peer is removed but the new one is unmanaged
• BZ - 1985629 - simplify moving ovs port
• BZ - 2044150 - [RFE] Raise proper exception for MTU
• BZ - 2053100 - nmstate rust removes untouched keys under `ovs-db`
• BZ - 2053150 - nmstate rust cannot change ovs-db of ovs bridge
• BZ - 2058292 - [RFE] Allow configuration of VLAN on an unmanaged interface
• BZ - 2059655 - Allowing arbitrary static DNS configuration
• BZ - 2084616 - cannot attach infiniband interface into bond without listing it under `interfaces` key
• BZ - 2090689 - Incorrect error message and code for invalid bridge VLAN filtering
• BZ - 2091458 - Raise exception when user try to set route to 0.0.0.0/8(or its subset)
• BZ - 2091460 - Replace the unsafe `libc::sysconf` to `nix::unistd::sysconf`
• BZ - 2094631 - Failed to remove linux bridge while a tun is attached
• BZ - 2094750 - nmstate rust requires "route-table-id" when changing vrf "port" only
• BZ - 2095207 - [RFE] Support IPv6 link local address for DNS server
• BZ - 2111398 - [RFE] Support VLAN trunk mode and and trunk-tags range for OVS-bridge
• BZ - 2113871 - OVS VLAN not working
• BZ - 2115615 - Cannot delete linux bridge created via `ip link`
• BZ - 2116306 - Changing an existing vrf interface requires route-table-id with rust
• BZ - 2117148 - RFE: nmstate shall support adding interfaces of type virtual-function using VF id and PF name
• BZ - 2118674 - Cannot partially disable linux bridge vlan filtering
• BZ - 2120473 - [RFE] Support MPTCP
• BZ - 2121315 - Cannot move bridge port to bond
• BZ - 2121397 - nmstatectl gc does not support OVS external ID
• BZ - 2122522 - nmstate API was broken by changing veth type
• BZ - 2125649 - nmstatectl gc produces inconsistent dns settings
• BZ - 2128415 - [RFE] Support all possible formats supported by 'ip rule' command
• BZ - 2130083 - allow extra IP address found in verification stage
• BZ - 2130240 - [RFE] add "balance-slb" bonding mode (multi chassis link aggregation (MLAG)
• BZ - 2130938 - [RFE] Support route rule in gen_conf mode
• BZ - 2134429 - [RFE] [nmstate] add "balance-slb" bonding mode (multi chassis link aggregation (MLAG)
• BZ - 2134534 - [rebase] Rebase Nmstate to last stable release
• BZ - 2136820 - [RFE] Allow policy based routing based on marking in nmstate
• BZ - 2137267 - if ipv6 is enabled, nmstate cannot raise proper exception for MTU
• BZ - 2137459 - Removing vrf and bond got org.freedesktop.NetworkManager.DependencyFailed
• BZ - 2141064 - RFE: avoid requiring ip-from / ip-to when specifying routing rules
• BZ - 2142003 - Add "controller" field to interface to attach to bridge, bond.
• BZ - 2144783 - [NMSTATE] bond_updelay setting in ovs bond is failing
• BZ - 2145183 - [RFC] Support ovs-db interface level `other_config`
• BZ - 2151624 - SR-IOV VF parameter configuration fails
• BZ - 2151905 - SR-IOV VFs not attached to Linux bond
• BZ - 2152101 - Linux bridge VLAN filter is showing as incorrect format `!id-range`.
• BZ - 2152820 - Create and remove veth, the veth is not removed at 2nd time
• BZ - 2154737 - failed to apply uncompressed ipv6 in dns
• BZ - 2154782 - failed to change route rules with ip filter
• BZ - 2155168 - [nmstate] Route table 254 for route rule is not defined by any routes
• BZ - 2155368 - Failed to move ovs port to linux bridge and bond
• BZ - 2156342 - [nmstate] Unable to set MTU for DPDK ports
• BZ - 2159679 - Got verification error when applying `ovs-db: {}` with OVS daemon stopped
• BZ - 2160103 - Duplicated group-forward-mask and group-fwd-mask in output of a linux bridge
• BZ - 2160670 - Cannot replace self-created ovs internal port with another ovs interface
• BZ - 2160942 - Failed at DNS verification when applying a state with many veth to be activated
• BZ - 2162401 - [RFE] [NMSTATE] [RHEL 9] IPv4 hash-based multipath routing is not working
• BZ - 2165283 - [rust] removing route rules treats empty string filter as wildcard
• BZ - 2165823 - [RFE] NMState to configure the ipv6.token
• BZ - 2166580 - [RFE] Enable SR-IOV VFs and configure them in a single context
• BZ - 2169982 - [RFE] DHCP based installation shall allow creation network bonding and allowing custom/specifying routes with nmstate.

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index