RHBA-2024:3731 - Bug Fix Advisory

Topic

An update for ovn23.09 is now available in Fast Datapath for Red Hat
Enterprise Linux 9.

Description

OVN, the Open Virtual Network, is a system to support virtual network
abstraction. OVN complements the existing capabilities of OVS to add
native support for virtual network abstractions, such as virtual L2 and L3
overlays and security groups.

Bug Fix(es) and Enhancement(s):

• Incorrect DNAT sequence from OVN-K gateway router nodeport load balancer (JIRA:FDP-439)
• ovn-controller wrong accounting of ofctrl_sb_flow_ref_usage-KB (JIRA:FDP-507)
• CLONE [ovn23.09 fast-datapath-rhel-9] - ovn-ic: multicast packet duplication (JIRA:FDP-547)
• CLONE [ovn23.09 fast-datapath-rhel-9] - ovn-controller is not logging ACL whose verdict is of type Pass (JIRA:FDP-558)
• northd 23.09 crashes on assert(od) when port forwarding tempest test is executed (JIRA:FDP-571)
• CLONE [ovn23.09 fast-datapath-rhel-9] - portrange for lr-nat-add is not documented in manpage for ovn-nbctl (JIRA:FDP-582)
• Make ovn-detrace NB database connection optional. (JIRA:FDP-68)
• OVN 23.09 24.D RHEL 9 Release (JIRA:FDP-598)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Users of ovn23.09 are advised to upgrade to these updated packages, which
add add these enhancements

Affected Products

• Red Hat Enterprise Linux Fast Datapath 9 x86_64
• Red Hat Enterprise Linux Fast Datapath (for RHEL Server for IBM Power LE) 9 ppc64le
• Red Hat Enterprise Linux Fast Datapath (for IBM z Systems) 9 s390x
• Red Hat Enterprise Linux Fast Datapath (for RHEL for ARM 64) 9 aarch64

Fixes

• FDP-439 - Incorrect DNAT sequence from OVN-K gateway router nodeport load balancer
• FDP-507 - ovn-controller wrong accounting of ofctrl_sb_flow_ref_usage-KB
• FDP-547 - CLONE [ovn23.09 fast-datapath-rhel-9] - ovn-ic: multicast packet duplication
• FDP-558 - CLONE [ovn23.09 fast-datapath-rhel-9] - ovn-controller is not logging ACL whose verdict is of type Pass
• FDP-571 - northd 23.09 crashes on assert(od) when port forwarding tempest test is executed
• FDP-582 - CLONE [ovn23.09 fast-datapath-rhel-9] - portrange for lr-nat-add is not documented in manpage for ovn-nbctl
• FDP-68 - Make ovn-detrace NB database connection optional.
• FDP-598 - OVN 23.09 24.D RHEL 9 Release

CVEs

(none)

References

(none)