RHBA-2023:3991 - Bug Fix Advisory

Topic

An update for ovn23.03 is now available in Fast Datapath for Red Hat Enterprise Linux 8.

Description

OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native support for virtual network abstractions, such as virtual L2 and L3 overlays and security groups.

Bug Fix(es) and Enhancement(s):

• IP fragmented traffic is not properly load balanced (BZ#2170885)
• [OVN SCALE] ovn-controller: OpenFlow flow explosion with 'hairpin_snat_ip' LBs (BZ#2171423)
• Router load balancers with no backends and event=false,reject=false should silently drop traffic. (BZ#2177173)
• Revisit OVN's logic of flushing conntrack (BZ#2178962)
• lsp failed to ping it's own floating ip with special configuration (BZ#2182255)
• Packet is sent to conntrack for some scenarios when outport is a peer of logical router port (BZ#2182401)
• Geneve tunnel interfaces are not moved when ovn-bridge is changed (BZ#2186081)
• ovn-controller thinks SB is read-only when it's not (BZ#2196412)
• mirror doesn't work when remote is ipv6 (BZ#2203019)
• Localnet port traffic is not load balanced on the localnet switch. (BZ#2208731)
• ovn-controller forgets to install flows upon OFPBFC_TIMEOUT (BZ#2211293)
• [OVN] Wrong log message "|WARN|handle service check: Unsupported protocol - [11]" for udp load_balancer healthe check (BZ#2216316)
• ovn-northd: Address set sync from NB DB to SB DB is not working when address has a prefix (BZ#2216318)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Fast Datapath 8 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 8 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 8 s390x
• Red Hat Enterprise Linux Fast Datapath (for RHEL for ARM 64) 8 aarch64

Fixes

• BZ - 2170885 - IP fragmented traffic is not properly load balanced
• BZ - 2171423 - [OVN SCALE] ovn-controller: OpenFlow flow explosion with 'hairpin_snat_ip' LBs
• BZ - 2177173 - Router load balancers with no backends and event=false,reject=false should silently drop traffic.
• BZ - 2178962 - Revisit OVN's logic of flushing conntrack
• BZ - 2182255 - lsp failed to ping it's own floating ip with special configuration
• BZ - 2182401 - Packet is sent to conntrack for some scenarios when outport is a peer of logical router port
• BZ - 2186081 - Geneve tunnel interfaces are not moved when ovn-bridge is changed
• BZ - 2196412 - ovn-controller thinks SB is read-only when it's not
• BZ - 2203019 - mirror doesn't work when remote is ipv6
• BZ - 2208731 - Localnet port traffic is not load balanced on the localnet switch.
• BZ - 2211293 - ovn-controller forgets to install flows upon OFPBFC_TIMEOUT
• BZ - 2216316 - [OVN] Wrong log message "|WARN|handle service check: Unsupported protocol - [11]" for udp load_balancer healthe check
• BZ - 2216318 - ovn-northd: Address set sync from NB DB to SB DB is not working when address has a prefix

CVEs

(none)

References

(none)