- Issued:
- 2016-06-29
- Updated:
- 2016-06-29
RHBA-2016:1353 - openstack-neutron bug fix advisory
Synopsis
openstack-neutron bug fix advisory
Type/Severity
Bug Fix Advisory None
Topic
Updated OpenStack Networking packages that resolve various issues are now available for Red Hat OpenStack Platform 8.0 (Liberty) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware. This advisory includes packages for:
- OpenStack Networking service
OpenStack Networking (neutron) is a virtual network service for OpenStack. Just as OpenStack Compute (nova) provides an API to dynamically request and configure virtual servers, OpenStack Networking provides an API to dynamically request and configure virtual networks. These networks connect 'interfaces' from other OpenStack services (e.g. virtual NICs from Compute VMs). The OpenStack Networking API supports extensions to provide advanced network capabilities (e.g. QoS, ACLs, network monitoring, etc.)
Changes to the openstack-neutron component:
-
Previously, when the metadata agent experienced an issue with RPC communication, it would start using the neutron client interface as a fallback. The only way to configure the metadata agent to use RPC again would then be to restart the agent. Due to this, metadata agent services would become unavailable after any disruption of RPC communication if neutron API credentials are not configured for the agent. With this update, the code that activates a fallback using neutron client has been removed from the metadata agent so that RPC is always used. (BZ#1340097)
-
This update removes unnecessary downtime caused by updating OvS switch reconfiguration when restarting the OvS agent. Previously, dropping flows on physical bridges caused networking to drop. The same issue was experienced when the patch port between br-int and br-tun was deleted and rebuilt during startup. This enhancement resolves these issues, making it possible to restart the OvS agent without unnecessarily disrupting network traffic. This results in no downtime when restarting the OvS neutron agent if the bridge is already set up and reconfiguration was not requested. (BZ#1340717)
-
Previously, the lbaasv2 stevedore entry point was not registered in the neutron.service_plugins namespace. This would cause neutron-server to fail if the lbaasv2 alias was used in the service_plugins option instead of the full Python import path to the plug-in. With this update, the missing stevedore alias was added to the package, allowing neutron-server to load the lbaasv2 plug-in using the alias. (BZ#1287677)
-
Previously, connectivity would never be enabled when attempting to use the new native OVSDB provider due to the db_set operation appearing to fail to change the patch ports from "nonexistant-peer" to the correct peer, thereby not linking the bridges together. This was caused by an incorrect method being used to set the peer interface of an OVS bridge. With this update, the peer option is now correctly set for both native and vsctl interfaces. (BZ#1341958)
Solution
Before applying this update, ensure all previously released errata relevant to your system have been applied.
Red Hat OpenStack Platform 8 runs on Red Hat Enterprise Linux 7.2.
The Red Hat OpenStack Platform 8 Release Notes contain the following:
- An explanation of the way in which the provided components interact to form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 8, including which channels need to be enabled and disabled.
The Release Notes are available at: This content is not included.https://access.redhat.com/documentation/en/red-hat-openstack-platform/version-8/release-notes/
This update is available through 'yum update' on systems registered through Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see:
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat OpenStack | 8 | x86_64 |
Updated Packages
- openstack-neutron-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-openvswitch-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-brocade-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-cisco-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-opencontrail-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-sriov-nic-agent-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-embrane-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-dev-server-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-linuxbridge-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-7.0.4-7.el7ost.src.rpm
- openstack-neutron-metering-agent-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-oneconvergence-nvsd-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-rpc-server-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-midonet-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-mellanox-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-common-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-nuage-7.0.4-7.el7ost.noarch.rpm
- python-networking-vmware-nsx-1.0.0-1.el7ost.src.rpm
- python-neutron-tests-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-bigswitch-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-ml2-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-ofagent-7.0.4-7.el7ost.noarch.rpm
- openstack-neutron-ovsvapp-7.0.4-7.el7ost.noarch.rpm
- python-neutron-7.0.4-7.el7ost.noarch.rpm
- python-networking-vmware-nsx-1.0.0-1.el7ost.noarch.rpm
Fixes
- This content is not included.BZ - 1287677
- This content is not included.BZ - 1299557
- This content is not included.BZ - 1308639
- This content is not included.BZ - 1334747
- This content is not included.BZ - 1340097
- This content is not included.BZ - 1340717
- This content is not included.BZ - 1341958
CVEs
(none)
References
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.