- Issued:
- 2014-07-24
- Updated:
- 2014-07-24
RHBA-2014:0936 - Bug Fix Advisory
Synopsis
openstack-neutron bug-fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Networking packages which resolve various issues are now
available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse).
Description
Red Hat Enterprise Linux OpenStack Platform provides the facilities for building
a private or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. This advisory includes packages for:
- OpenStack Networking service ("Neutron").
OpenStack Networking (code name Neutron) is a virtual network service for
OpenStack. Just as OpenStack Compute (Nova) provides an API to dynamically
request and configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute VMs).
The OpenStack Networking API supports extensions to provide advanced network
capabilities (e.g. QoS, ACLs, network monitoring, etc.)
- Previously, when deleting a port, a notification was issued while under
database transaction that resulted in a current green thread switch. When green
thread switched to another thread that attempted to access to a database row
that was already locked by the first thread, deadlock occurred. After a delay
(50 seconds), database library returned OperationalError due to a time out.
With this update, the notification that could result in the green thread switch
was moved outside the database transaction, so that a deadlock does not occur in
this particular scenario. (BZ#1109577)
- The openstack-neutron packages have been rebased to version: 2014.1.1
Important fixes include:
- The OVS agent now correctly handles a restart of the Open Vswitch service.
- Querying for security groups has been optimised.
- The performance of the router-list command has been optimised; its average
time has been reduced from 10-30%.
- Multiple updates have been made to VMware NSX, Cisco N1kv, and other plugins.
(BZ#1117893)
- Previously, Networking packaging excluded OCF resources for the
'neutron-netns-cleanup' and 'neutron-ova-cleanup' services.
As a result, Pacemaker did not clean up unused network namespaces and Open
vSwitch resources when fencing the Networking service.
With this update, the previously excluded OCF resources were added to Networking
packages.
As a result, Pacemaker is now able to clean up unused network namespaces and
Open vSwitch resources when fencing the Networking service. (BZ#1118792)
- Prior to this update, LBaaS and DHCP agents relied on Python code specific to
a certain Open vSwitch plug-in location. This code was moved into a separate
'openstack-neutron-openvswitch' package.
Consequently, LBaaS and DHCP agents failed on startup if the plug-in package was
not installed.
With this update, all Python code from plug-in-specific packages have been
pulled back to 'python-neutron' in order to resolve Python import dependencies.
As a result, LBaaS and DHCP agents startup successfully when no
'openstack-neutron-openvswitch' package is installed. (BZ#1119619)
- Previously, OpenStack Networking packaging split plugin specific Python files
from common python-neutron packages into per-plugin packages. It turned out that
some parts of the code that were split into separate packages are
interdependent, and cannot work correctly without split counterparts.
As a result some ML2 drivers fail to work if openstack-neutron-ml2 is installed
without a driver-specific plugin.
Now, all plugin specific Python code (except agent executables) were moved back
into python-neutron. As a result, hidden interdependencies between miscellaneous
plugins are no longer broken. (BZ#1120332)
These packages update OpenStack Networking to version 2014.1.1.
These packages also fix various bugs. Documentation for these bug fixes is
available in the Technical Notes document:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Technical_Notes/index.html
Solution
Before applying this update, ensure all previously released errata
relevant to your system have been applied.
Red Hat Enterprise Linux OpenStack Platform 5 for RHEL 7 runs on Red Hat
Enterprise Linux 7.0.
The Red Hat Enterprise Linux OpenStack Platform 5 for RHEL 7 Release Notes
contain the following:
- An explanation of how the provided components interact to form a working cloud
computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat Enterprise Linux OpenStack Platform 5 for
RHEL 7, including which channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Release_Notes/index.html
This update is available through the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
Affected Products
- Red Hat OpenStack 5.0 for RHEL 7 x86_64
Fixes
- BZ - 1109577 - DB locking errors when deleting multiple instances that have floating IPs associated to them.
- BZ - 1112968 - neutron-openvswitch-agent exits with 1 on SIGTERM
- BZ - 1115410 - Neutron packaging attempts to update sudoers config file avoiding usual procedure
- BZ - 1117893 - Rebase openstack-neutron to 2014.1.1
- BZ - 1118792 - Add OCF Resources to neutron-netns-cleanup and neutron-ovs-cleanup for pacemaker
- BZ - 1119619 - neutron-dhcp-agent and neutron-lbaas-agent fail to start
- BZ - 1120332 - Neutron packaging breaks ML2 drivers that depend on another plugin
CVEs
(none)
Red Hat OpenStack 5.0 for RHEL 7
SRPM | |
---|---|
openstack-neutron-2014.1.1-4.el7ost.src.rpm | SHA-256: 67b73fd823f73bc1743c9f36842b7dccb31a1c171be0e0c2c8d9afeccf24b2d3 |
x86_64 | |
openstack-neutron-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 0d14d33472d4ba59500ba616adcfaab05fbd44a72253ec658cdcfd55b46598dc |
openstack-neutron-bigswitch-2014.1.1-4.el7ost.noarch.rpm | SHA-256: b6a44b8b73b203b07852c54f0a45138628ff47733099c9a09cce3d53bb5abca0 |
openstack-neutron-brocade-2014.1.1-4.el7ost.noarch.rpm | SHA-256: bdd8013461d94760483e1237f4b57b4d4afc38bddbfb14d6ccc883418647cd4c |
openstack-neutron-cisco-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 802f27ef19e98d3534cf38af953ed9636a11ade9e72654dcfb7afabcd3542859 |
openstack-neutron-hyperv-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 5c6f63b841ba9e074f4adada78339f68dd9ab03132552de2768caebeeaca2e88 |
openstack-neutron-ibm-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 4f3c60198c58139002424051cae523d2db07dc808c5ed4c768d563f0012d0142 |
openstack-neutron-linuxbridge-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 65a1bea7563c46ffa16615686e67e9a9f8a3101fcc939e30a6d18314e6306062 |
openstack-neutron-mellanox-2014.1.1-4.el7ost.noarch.rpm | SHA-256: d7e9acb4664b484d7751e3c07870599e4ea755731716fe849d3a70685192ff5e |
openstack-neutron-metaplugin-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 6d4d281c76002d67d478d25bfb9377a6c51914d0382f21ecfcb49a3fc3198f10 |
openstack-neutron-metering-agent-2014.1.1-4.el7ost.noarch.rpm | SHA-256: fd6bab4f29c58ce8b27f1c08e7cc22d09a5d92843342b6c24c5e00ff69423564 |
openstack-neutron-midonet-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 6d08e5f6c131e90f18c1fc701de1d03bccdb611fc8f44e06df516ea39330741a |
openstack-neutron-ml2-2014.1.1-4.el7ost.noarch.rpm | SHA-256: f6ea827f066083a50fe8aa1d88379c598f2777831371ea8433b7dcb4e77b480b |
openstack-neutron-nec-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 02b5459e28ca0660cf1e4c4ccfd1b50990f23fe30f774cf190d37f0d2bd0e63e |
openstack-neutron-ofagent-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 15554c95ecb8df37f001252e8acab08627021def4520b3f96acb51be96cb7881 |
openstack-neutron-oneconvergence-nvsd-2014.1.1-4.el7ost.noarch.rpm | SHA-256: bac9ab93a1d67c6252cae27d48c31d4fed820b80ac2b43307ce1452678a1520e |
openstack-neutron-openvswitch-2014.1.1-4.el7ost.noarch.rpm | SHA-256: f03f47fae7ff9e4be65903109fb283ac6a8e9f0aa56a16cdf5d0ae81d6e0af89 |
openstack-neutron-plumgrid-2014.1.1-4.el7ost.noarch.rpm | SHA-256: e6ede0330895c36b2b69ec76a4f07e0a734f60632cd9938bd3cff44488ed19fc |
openstack-neutron-ryu-2014.1.1-4.el7ost.noarch.rpm | SHA-256: 652f46bc7944b30bef54381d31bcc7d91fa43ffea5b381fab65136e1ee51c9f3 |
openstack-neutron-vmware-2014.1.1-4.el7ost.noarch.rpm | SHA-256: d9df4284bca74bffd3fef5a0e24600ada8acc986437b0e2a47b9e9d3d8d992be |
openstack-neutron-vpn-agent-2014.1.1-4.el7ost.noarch.rpm | SHA-256: b9c0c8d65e68226df4f4d649eb4697566df979e711eab569b8ac798bfb4c7b64 |
python-neutron-2014.1.1-4.el7ost.noarch.rpm | SHA-256: f3cd62e0e1112fcabad5aaa3d26d696080ef3f00a5ae4c136dcbb6211b86475a |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.