Recommended update for openvswitch and dpdk

Announcement ID: SUSE-RU-2018:3858-1
Rating: moderate
References:
Affected Products:
  • Server Applications Module 15
  • SUSE Linux Enterprise High Performance Computing 15
  • SUSE Linux Enterprise Server 15
  • SUSE Linux Enterprise Server for SAP Applications 15

An update that has four fixes can now be installed.

Description:

This update provides version 2.8.5 of openvswitch and version 17.11.4 of dpdk and brings many fixes and improvements:

openvswitch:

  • compat: Initialize IPv4 reassembly secret timer
  • conntrack: Fix use after free for FTP control case.
  • conntrack: Fix using alg_exp_entry out of scope.
  • daemon-unix: Use same name for original or restarted children.
  • datapath: Stt: Linearize in SKIP_ZERO_COPY case
  • dpctl.man: Correct argument to "dump-flows".
  • dpif-netdev: Add vlan to mask for flow_put operation.
  • dpif-netdev.at: Add missing backslash.
  • dpif-netdev: Prevent unsafe access when retrieving meter stats.
  • dpif-netlink: Don't allocate per thread netlink sockets (bsc#1110865)
  • dpif-netlink: Fix null pointer.
  • expr: Disallow < <= >= > comparisons against empty value set.
  • expr: Set a limit on the depth of nested parentheses
  • flow: Fix uninitialized flow fields in IPv6 error case.
  • ifupdown.sh: Correctly bring up bond slaves.
  • lex: Fix buffer overrun parsing overlong hexadecimal constants.
  • lib: Fix typo in fragment handling error messages
  • lib/tc: Reject offloading of non-Ethernet packets
  • lib/tc: Treat vlan id and prio as independent fields
  • meta-flow: Make mf_vl_mff_mf_from_nxm_header() require a valid field.
  • meta-flow: Make "nw_frag" a synonym for "ip_frag".
  • netdev-dpdk: Enable HW_CRC_STRIP for virtual functions.
  • netdev-dpdk: Fix failure to configure flow control at netdev-init.
  • netdev-dpdk: Handle ENOTSUP for rte_eth_dev_set_mtu.
  • netdev-dpdk: Support the link speed of XL710
  • netdev-dpdk: Use hex for PCI vendor ID.
  • netdev-linux: Avoid division by 0 if kernel reports bad scheduler data.
  • netdev: Properly clear 'details' when iterating in NETDEV_QOS_FOR_EACH.
  • nx-match: Avoid double-free on some error paths.
  • nx-match: Fix memory leak in oxm_pull_field_array() error case.
  • odp-util: Don't attempt to write IPv6 flow label bits that don't exist.
  • odp-util: Fix a use-after-free bug.
  • ofctl: Fixup compare_flows function
  • ofp-actions: Avoid assertion failure for clone(ct(...bad actions...)).
  • ofp-actions: Avoid buffer overread in BUNDLE action decoding.
  • ofp-actions: Fix buffer overread in decode_LEARN_specs().
  • ofp-actions: Re-fix error path for parsing OpenFlow actions.
  • ofp-group: Don't assert-fail decoding bad OF1.5 group mod type or command.
  • ofproto-dpif: Fix NXT_RESUME flow stats
  • ofproto-dpif-xlate: Avoid deadlock on multicast snooping recursion.
  • ofproto-dpif-xlate: Fix conntrack fields on NXT_RESUME
  • ofproto: Fix OVS crash when reverting old flows in bundle commit
  • ovn-controller: Fix test - IP relocation using GARP request.
  • ovn: Fix DHCP classless static route for non-classful masks.
  • ovn-northd: LR respond ARP from valid subnet only.
  • ovn-northd: Support learning neighbor from ARP request.
  • ovs-ctl: Allow add-remote without vswitchd started.
  • ovsdb-client: Fix a bug that uses wrong index
  • ovsdb-idl.c: Fix IDL index problem when rows are updated.
  • ovs-ofctl: Better validate OpenFlow message length in "ofp-parse-pcap".
  • ovs-thread: Fix thread id for threads not started with ovs_thread_create()
  • pcap-file: Fix formatting of log message.
  • rconn: Introduce new invariant to fix assertion failure in corner case.
  • rconn: Suppress 'connected' log for unreliable connections.
  • stream-ssl: Define SSL_OP_NO_SSL_MASK for OpenSSL versions that lack it.
  • stream-ssl: Don't enable new TLS versions by default
  • tests: Make test result more predictable.
  • tests: Use the default key length when generating RSA keys
  • utilities: Drop shebang from bash completion script
  • utilities: Launch ovsdb-tool without using PAM

dpdk:

  • Do proper CPU compatibility test. (bsc#1099474)
  • Fix a syntax error affecting csh environment configuration. (bsc#1102310)
  • Fixes in app/testpmd:
    • Fix buffer leak in TM command.
    • Fix DCB config.
    • Fix VLAN TCI mask set error for FDIR.
  • Fixes in bus/dpaa:
    • Fix buffer offset setting in FMAN.
    • Fix phandle support for Linux 4.16.
  • Fixes in doc:
    • Fix bonding command in testpmd.
    • Update qede management firmware guide.
  • Fixes in eal:
    • Fix bitmap documentation.
    • Fix return codes on thread naming failure
    • Fix invalid syntax in interrupts.
    • Fix uninitialized value.
  • Fixes in eventdev:
    • Add event buffer flush in Rx adapter.
    • Fix internal port logic in Rx adapter.
    • Fix missing update to Rx adapter WRR position.
    • Fix port in Rx adapter internal function.
    • Fix Rx SW adapter stop.
  • Fixes in hash:
    • Fix a multi-writer race condition.
    • Fix doxygen of return values.
    • Fix key slot size accuracy.
    • Fix multiwriter lock memory allocation.
  • Fixes in kni:
    • Fix build with gcc 8.1.
    • Fix crash with null name.
  • Fixes in vhost:
    • Fix missing increment of log cache count.
    • Flush IOTLB cache on new mem table handling.
    • Improve dirty pages logging performance.
    • Release locks on RARP packet failure.
    • Re-translate vring address when memory table changes.
  • PMD drivers: various fixes for bnxt, dpaa2, mlx5.
  • Fix a problem with ABI compatibility: API/ABI compatibility is guaranteed by DPDK upstream community across subsequent bug-fix releases. However, the .spec file broke it by defining the wrong version which included also the bug-fix release number.
  • Fixed a naming issue with library: it was not reflecting the soname.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • Server Applications Module 15
    zypper in -t patch SUSE-SLE-Module-Server-Applications-15-2018-2736=1

Package List:

  • Server Applications Module 15 (aarch64 ppc64le x86_64)
    • dpdk-17.11.4-3.9.15
    • dpdk-debuginfo-17.11.4-3.9.15
    • libdpdk-17_11-17.11.4-3.9.15
    • dpdk-kmp-default-17.11.4_k4.12.14_25.25-3.9.15
    • dpdk-tools-debuginfo-17.11.4-3.9.15
    • dpdk-devel-17.11.4-3.9.15
    • dpdk-devel-debuginfo-17.11.4-3.9.15
    • dpdk-debugsource-17.11.4-3.9.15
    • dpdk-kmp-default-debuginfo-17.11.4_k4.12.14_25.25-3.9.15
    • libdpdk-17_11-debuginfo-17.11.4-3.9.15
    • dpdk-tools-17.11.4-3.9.15
  • Server Applications Module 15 (aarch64)
    • dpdk-thunderx-kmp-default-debuginfo-17.11.4_k4.12.14_25.25-3.9.15
    • dpdk-thunderx-devel-debuginfo-17.11.4-3.9.15
    • dpdk-thunderx-debuginfo-17.11.4-3.9.15
    • dpdk-thunderx-debugsource-17.11.4-3.9.15
    • dpdk-thunderx-kmp-default-17.11.4_k4.12.14_25.25-3.9.15
    • dpdk-thunderx-devel-17.11.4-3.9.15
    • dpdk-thunderx-17.11.4-3.9.15
  • Server Applications Module 15 (aarch64 ppc64le s390x x86_64)
    • libopenvswitch-2_8-0-2.8.5-6.8.5
    • openvswitch-debugsource-2.8.5-6.8.5
    • openvswitch-devel-2.8.5-6.8.5
    • openvswitch-2.8.5-6.8.5
    • openvswitch-debuginfo-2.8.5-6.8.5
    • libopenvswitch-2_8-0-debuginfo-2.8.5-6.8.5

References: