# changelog

author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-42
changelog:
  - Merging upstream branch-2.15 [RH git: 2a86017f3f]
      Commit list:
      f8274b78c3 datapath-windows:adjust Offset when processing packet in POP_VLAN action


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-43
changelog:
  - Merging upstream branch-2.15 [RH git: 09e3ab3630]
      Commit list:
      9efa2ea619 ipf: release unhandled packets from the batch


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-44
changelog:
  - Merging upstream branch-2.15 [RH git: 3050e5222d]
      Commit list:
      58397f222b dpdk-stub: Change the ERR log to DBG.
      2a963fc314 python: idl: Avoid sending transactions when the DB is not synced up.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-45
changelog:
  - Merging upstream branch-2.15 [RH git: e273e307d1]
      Commit list:
      ea2ca0af16 dpif-netdev: Fix use-after-free on PACKET_OUT of IP fragments.
      9f964354e3 tunnel-push-pop.at: Mask source port in tunnel header.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-46
changelog:
  - Merging upstream branch-2.15 [RH git: f8619036c9]
      Commit list:
      3f718857e7 ofproto-dpif-xlate: Fix zone set from non-frozen-metadata fields.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-47
changelog:
  - Merging upstream branch-2.15 [RH git: 01110b9088]
      Commit list:
      b7d9c491ec datapath-windows: add layers when adding the deferred actions


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-48
changelog:
  - Merging upstream branch-2.15 [RH git: 7cf784736e]
      Commit list:
      2cf63851a5 Prepare for 2.15.3.
      63f9a7c5d8 Set release date for 2.15.2.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-49
changelog:
  - Merging upstream branch-2.15 [RH git: 2502ca29b0]
      Commit list:
      952e851506 ci: Make linux-prepare trust system installs.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-50
changelog:
  - Merging upstream branch-2.15 [RH git: 16dad85706]
      Commit list:
      031cf67e09 netdev-offload-tc: Verify the flower rule installed.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-51
changelog:
  - Merging upstream branch-2.15 [RH git: a134a530c9]
      Commit list:
      eca2d50d40 datapath-windows:Reset PseudoChecksum value only for TX direction offload case


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-52
changelog:
  - Merging upstream branch-2.15 [RH git: 001ae577c6]
      Commit list:
      08a270dda1 datapath-windows: Reset flow key after Ipv4 fragments are reassembled


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-53
changelog:
  - Merging upstream branch-2.15 [RH git: 9221a2233d]
      Commit list:
      01bc910e57 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-54
changelog:
  - Merging upstream branch-2.15 [RH git: d4f13fd840]
      Commit list:
      0590e88387 flow: Consider dataofs when parsing TCP packets.
      7266042d84 tests/flowgen: Fix packet data endianness.
      d2e0632dbe ofproto: Fix resource usage explosion due to removal of large number of flows.
      0a7e66e37f ofproto: Fix resource usage explosion while processing bundled FLOW_MOD.
      68466efed9 tests/flowgen: Fix length field of 802.2 data link header.
      2a2185f9e6 ovs-lib: Backup and remove existing DB when joining cluster.
      fcbc29c6f0 docs/dpdk: Fix install doc.
      a5d97d4202 ovs-save: Save igmp flows in ofp_parse syntax.
      1cbd1f0f56 faq: Update OVS/DPDK version table for OVS 2.13/2.14.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-55
changelog:
  - Merging upstream branch-2.15 [RH git: a1abf356d3]
      Commit list:
      d477f60008 compat: handle NF_REPEAT error on nf_conntrack_in.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-56
changelog:
  - Merging upstream branch-2.15 [RH git: 9504acc03d]
      Commit list:
      31288dc725 Prepare for 2.15.4.
      e4d2df62e6 Set release date for 2.15.3.
      b8baa11416 python: Add cooperative_yield() API method to Idl.
      7834abc669 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed.
      833c02daab tnl-neigh-cache: Do not refresh the entry while revalidating.
      e2182eca88 tnl-neigh-cache: Include expected array sizes in prototypes.
      566fe43721 tnl-neigh-cache: Read/write expires atomically.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-72
changelog:
  - Merging upstream branch-2.15 [RH git: e478bef7a4]
      Commit list:
      1c050d932b ofproto: Fix ipfix not always sampling on egress. (#2016346)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-73
changelog:
  - Merging upstream branch-2.15 [RH git: 0b62621839]
      Commit list:
      7691fbe77b dp-packet: Ensure packet base is always non-NULL.
      deb59ba9af bfd: lldp: stp: Fix misaligned packet field access.
      2b2371b3c3 ovsdb-idlc: Avoid accessing member within NULL idl index cursors.
      193c79ca40 stopwatch: Fix buffer underflow when computing percentiles.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-74
changelog:
  - Merging upstream branch-2.15 [RH git: 84306060e6]
      Commit list:
      9e2af615c1 dpif-netdev-dpcls: Make subtable reprobe thread-safe.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-75
changelog:
  - Merging upstream branch-2.15 [RH git: a01913de4d]
      Commit list:
      8a60afaa00 ovsdb-idl: Fix use-after-free when destroying an IDL loop.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-76
changelog:
  - Merging upstream branch-2.15 [RH git: 9265101135]
      Commit list:
      115f1543b2 datapath-windows: Fix NXM_OF_IP_TOS issue


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-77
changelog:
  - Merging upstream branch-2.15 [RH git: 50c394233c]
      Commit list:
      b6007add57 ovsdb: raft: Fix inability to join the cluster after interrupted attempt. (#2033514)
      dce48bb003 reconnect: Fix broken inactivity probe if there is no other reason to wake up.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-79
changelog:
  - Merging upstream branch-2.15 [RH git: 82cbd329f0]
      Commit list:
      e05105f1e6 tc: Fix stats byte count on fragmented packets.
      81aa8c8073 compat: Add gen_stats include to define tc hw stats.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-80
changelog:
  - Merging upstream branch-2.15 [RH git: 729a55e204]
      Commit list:
      08d77484f6 ofproto-dpif: Trigger revalidation when ipfix config set.
      bc3b88c8ad system-tso: Skip encap tests when userspace TSO is enabled.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-81
changelog:
  - Merging upstream branch-2.15 [RH git: a735607890]
      Commit list:
      8a58897b56 ofproto: Use xlate map for uuid lookups.
      c091911e13 ofproto: Add refcount to ofproto to fix ofproto use-after-free.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-90
changelog:
  - Merging upstream branch-2.15 [RH git: 9e3e8cde3c]
      Commit list:
      80b57ee01f dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id.
      c1bbb1ec6d ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal().


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-91
changelog:
  - Merging upstream branch-2.15 [RH git: 09b0ffda32]
      Commit list:
      3719bdafc4 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-92
changelog:
  - Merging upstream branch-2.15 [RH git: 74dde447f6]
      Commit list:
      d848639d27 NEWS: Highlight libopenvswitch API change caused by UB fixes.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-93
changelog:
  - Merging upstream branch-2.15 [RH git: c8842bbbf9]
      Commit list:
      27a2daad0e Prepare for 2.15.5.
      c281f01dd3 Set release date for 2.15.4.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-94
changelog:
  - Merging upstream branch-2.15 [RH git: c55ba17247]
      Commit list:
      3da1b0c456 cirrus: Update FreeBSD versions.


author: Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-95
changelog:
  - Really set RTE_ETH_MAXPORTS to 1024 [RH git: 4c53699c3e]
      Fixes: cbe02d895f52 ("Change RTE_ETH_MAXPORTS to 1024")


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-96
changelog:
  - Merging upstream branch-2.15 [RH git: 87fde112ca]
      Commit list:
      09759f9957 ofproto-xlate: Fix crash when forwarding packet between legacy_l3 tunnels.
      dd6e5983a8 system-traffic: Fix fragment reassembly with L3 L4 protocol information.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-97
changelog:
  - Merging upstream branch-2.15 [RH git: 885e0d0ad5]
      Commit list:
      cbed56773f ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. (#393566
      2060552)


author: Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-98
changelog:
  - vhost: fix FD leak with inflight messages [RH git: 9d20e2fe62]
      [ upstream commit af74f7db384ed149fe42b21dbd7975f8a54ef227 ]
      
      Even if unlikely, a buggy vhost-user master might attach fds to inflight
      messages. Add checks like for other types of vhost-user messages.
      
      Fixes: d87f1a1cb7b6 ("vhost: support inflight info sharing")
      
      Signed-off-by: David Marchand <david.marchand@redhat.com>
      Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>


author: Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-99
changelog:
  - vhost: fix queue number check when setting inflight FD [RH git: ba1bcead43]
      [ upstream commit 6442c329b9d2ded0f44b27d2016aaba8ba5844c5 ]
      
      In function vhost_user_set_inflight_fd, queue number in inflight
      message is used to access virtqueue. However, queue number could
      be larger than VHOST_MAX_VRING and cause write OOB as this number
      will be used to write inflight info in virtqueue structure. This
      patch checks the queue number to avoid the issue and also make
      sure virtqueues are allocated before setting inflight information.
      
      Fixes: ad0a4ae491fe ("vhost: checkout resubmit inflight information")
      
      Reported-by: Wenxiang Qian <leonwxqian@gmail.com>
      Signed-off-by: Chenbo Xia <chenbo.xia@intel.com>
      Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-23
changelog:
  - Merging upstream branch-2.16 [RH git: cce913794e]
      Commit list:
      2a4c87f300 Prepare for 2.16.2.
      aaa1439b8e Set release date for 2.16.1.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-24
changelog:
  - Merging upstream branch-2.16 [RH git: 4682b76694]
      Commit list:
      b79f0369f2 ci: Make linux-prepare trust system installs.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-25
changelog:
  - Merging upstream branch-2.16 [RH git: f5366890c5]
      Commit list:
      c221c8e613 datapath-windows:Reset PseudoChecksum value only for TX direction offload case


author: Ilya Maximets <i.maximets@redhat.com> - 2.16.0-26
changelog:
  - ovsdb: transaction: Incremental reassessment of weak refs. [RH git: e8a363db49] (#2005958)
      commit 4dbff9f0a68579241ac1a040726be3906afb8fe9
      Author: Ilya Maximets <i.maximets@ovn.org>
      Date:   Sat Oct 16 03:20:23 2021 +0200
      
          ovsdb: transaction: Incremental reassessment of weak refs.
      
          The main idea is to not store list of weak references in the source
          row, so they all don't need to be re-checked/updated on every
          modification of that source row.  The point is that source row already
          knows UUIDs of all destination rows stored in the data, so there is no
          much profit in storing this information somewhere else.  If needed,
          destination row can be looked up and reference can be looked up in the
          destination row.  For the fast lookup, destination row now stores
          references in a hash map.
      
          Weak reference structure now contains the table and uuid of a source
          row instead of a direct pointer.  This allows to replace/update the
          source row without breaking any weak references stored in destination
          rows.
      
          Structure also now contains the key-value pair of atoms that triggered
          creation of this reference.  These atoms can be used to quickly
          subtract removed references from a source row.  During reassessment,
          ovsdb now only needs to care about new added or removed atoms, and
          atoms that got removed due to removal of the destination rows, but
          these are marked for reassessment by the destination row.
      
          ovsdb_datum_subtract() is used to remove atoms that points to removed
          or incorrect rows, so there is no need to re-sort datum in the end.
      
          Results of an OVN load-balancer benchmark that adds 3K load-balancers
          to each of 120 logical switches and 120 logical routers in the OVN
          sandbox with clustered Northbound database and then removes them:
      
          Before:
      
            %CPU  CPU Time  CMD
            86.8  00:16:05  ovsdb-server nb1.db
            44.1  00:08:11  ovsdb-server nb2.db
            43.2  00:08:00  ovsdb-server nb3.db
      
          After:
      
            %CPU  CPU Time  CMD
            54.9  00:02:58  ovsdb-server nb1.db
            33.3  00:01:48  ovsdb-server nb2.db
            32.2  00:01:44  ovsdb-server nb3.db
      
          So, on a cluster leader the processing time dropped by 5.4x, on
          followers - by 4.5x.  More load-balancers - larger the performance
          difference.  There is a slight increase of memory usage, because new
          reference structure is larger, but the difference is not significant.
      
          Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
          Acked-by: Dumitru Ceara <dceara@redhat.com>
      
      Reported-at: https://bugzilla.redhat.com/2005958
      Signed-off-by: Ilya Maximets <i.maximets@redhat.com>


author: Ilya Maximets <i.maximets@redhat.com> - 2.16.0-27
changelog:
  - ovsdb: Don't let transaction history grow larger than the database. [RH git: 93d1fa0bdf] (#2012949)
      commit 317b1bfd7dd315e241c158e6d4095002ff391ee3
      Author: Ilya Maximets <i.maximets@ovn.org>
      Date:   Tue Sep 28 13:17:21 2021 +0200
      
          ovsdb: Don't let transaction history grow larger than the database.
      
          If user frequently changes a lot of rows in a database, transaction
          history could grow way larger than the database itself.  This wastes
          a lot of memory and also makes monitor_cond_since slower than
          usual monotor_cond if the transaction id is old enough, because
          re-construction of the changes from a history is slower than just
          creation of initial database snapshot.  This is also the case if
          user deleted a lot of data, so transaction history still holds all of
          it while the database itself doesn't.
      
          In case of current lb-per-service model in ovn-kubernetes, each
          load-balancer is added to every logical switch/router.  Such a
          transaction touches more than a half of a OVN_Northbound database.
          And each of these transactions is added to the transaction history.
          Since transaction history depth is 100, in worst case scenario,
          it will hold 100 copies of a database increasing memory consumption
          dramatically.  In tests with 3000 LBs and 120 LSs, memory goes up
          to 3 GB, while holding at 30 MB if transaction history disabled in
          the code.
      
          Fixing that by keeping count of the number of ovsdb_atom's in the
          database and not allowing the total number of atoms in transaction
          history to grow larger than this value.  Counting atoms is fairly
          cheap because we don't need to iterate over them, so it doesn't have
          significant performance impact.  It would be ideal to measure the
          size of individual atoms, but that will hit the performance.
          Counting cells instead of atoms is not sufficient, because OVN
          users are adding hundreds or thousands of atoms to a single cell,
          so they are largely different in size.
      
          Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
          Acked-by: Han Zhou <hzhou@ovn.org>
          Acked-by: Dumitru Ceara <dceara@redhat.com>
      
      Reported-at: https://bugzilla.redhat.com/2012949
      Signed-off-by: Ilya Maximets <i.maximets@redhat.com>


author: Timothy Redaelli <tredaelli@redhat.com> - 2.16.0-29
changelog:
  - python: socket-util: Split inet_open_active function and use connect_ex. [RH git: 2e704b371c]
      In an upcoming patch, PyOpenSSL will be replaced with Python ssl module,
      but in order to do an async connection with Python ssl module the ssl
      socket must be created when the socket is created, but before the
      socket is connected.
      
      So, inet_open_active function is splitted in 3 parts:
      - inet_create_socket_active: creates the socket and returns the family and
        the socket, or (error, None) if some error needs to be returned.
      - inet_connect_active: connect the socket and returns the errno (it
        returns 0 if errno is EINPROGRESS or EWOULDBLOCK).
      
      connect is replaced by connect_ex, since Python suggest to use it for
      asynchronous connects and it's also cleaner since inet_connect_active
      returns errno that connect_ex already returns, moreover due to a Python
      limitation connect cannot not be used with ssl module.
      
      inet_open_active function is changed in order to use the new functions
      inet_create_socket_active and inet_connect_active.
      
      Signed-off-by: Timothy Redaelli <tredaelli@redhat.com>
      Acked-by: Terry Wilson <twilson@redhat.com>
      Tested-by: Terry Wilson <twilson@redhat.com>
      Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
      Signed-off-by: Timothy Redaelli <tredaelli@redhat.com>


author: Timothy Redaelli <tredaelli@redhat.com> - 2.16.0-30
changelog:
  - python: Replace pyOpenSSL with ssl. [RH git: 0cd5867531] (#1988429)
      Currently, pyOpenSSL is half-deprecated upstream and so it's removed on
      some distributions (for example on CentOS Stream 9,
      https://issues.redhat.com/browse/CS-336), but since OVS only
      supports Python 3 it's possible to replace pyOpenSSL with "import ssl"
      included in base Python 3.
      
      Stream recv and send had to be splitted as _recv and _send, since SSLError
      is a subclass of socket.error and so it was not possible to except for
      SSLWantReadError and SSLWantWriteError in recv and send of SSLStream.
      
      TCPstream._open cannot be used in SSLStream, since Python ssl module
      requires the SSL socket to be created before connecting it, so
      SSLStream._open needs to create the socket, create SSL socket and then
      connect the SSL socket.
      
      Reported-by: Timothy Redaelli <tredaelli@redhat.com>
      Reported-at: https://bugzilla.redhat.com/1988429
      Signed-off-by: Timothy Redaelli <tredaelli@redhat.com>
      Acked-by: Terry Wilson <twilson@redhat.com>
      Tested-by: Terry Wilson <twilson@redhat.com>
      Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
      Signed-off-by: Timothy Redaelli <tredaelli@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-31
changelog:
  - Merging upstream branch-2.16 [RH git: 77a249d38b]
      Commit list:
      f8f2f7c9cb datapath-windows: Reset flow key after Ipv4 fragments are reassembled


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-32
changelog:
  - Merging upstream branch-2.16 [RH git: e90e06a818]
      Commit list:
      1d8e0f861f ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-33
changelog:
  - Merging upstream branch-2.16 [RH git: 8708b55152]
      Commit list:
      3e527f21cf flow: Consider dataofs when parsing TCP packets.
      b537e049ad tests/flowgen: Fix packet data endianness.
      35244b4980 ofproto: Fix resource usage explosion due to removal of large number of flows.
      a201297639 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD.
      cd0133402c tests/flowgen: Fix length field of 802.2 data link header.
      2d65b8ffd2 ovs-lib: Backup and remove existing DB when joining cluster.
      ab01177637 docs/dpdk: Fix install doc.
      38a2129524 ovs-save: Save igmp flows in ofp_parse syntax.
      dc77857ce2 faq: Update OVS/DPDK version table for OVS 2.13/2.14.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-34
changelog:
  - Merging upstream branch-2.16 [RH git: 07b9bf085a]
      Commit list:
      f42c484445 compat: handle NF_REPEAT error on nf_conntrack_in.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-35
changelog:
  - Merging upstream branch-2.16 [RH git: 6ad0375ff5]
      Commit list:
      2595b7b3d1 Prepare for 2.16.3.
      6caaae525c Set release date for 2.16.2.
      443e3657d7 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed.
      75d2ef9a60 tnl-neigh-cache: Do not refresh the entry while revalidating.
      5d88836566 tnl-neigh-cache: Read/write expires atomically.
      fb42c99c15 dpif-netdev: Improve handling of IP/TCP in avx512 mfex.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-36
changelog:
  - Merging upstream branch-2.16 [RH git: edae801e00]
      Commit list:
      ba7fffb832 dpif-netdev: Improve loading of packet data for undersized packets.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-37
changelog:
  - Merging upstream branch-2.16 [RH git: c9297f5ef7]
      Commit list:
      29936a853f ofproto-dpif: Fix memory leak in dpif/show-dp-features appctl.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-38
changelog:
  - Merging upstream branch-2.16 [RH git: e370e283cf]
      Commit list:
      bd8ebcd10c Documentation: Fix Rx/Tx queue configuration section.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-39
changelog:
  - Merging upstream branch-2.16 [RH git: 349d687673]
      Commit list:
      f2ee013f73 datapath-windows: Pickup Ct tuple as CT lookup key in function OvsCtSetupLookupCtx


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-40
changelog:
  - Merging upstream branch-2.16 [RH git: 60b19f443c]
      Commit list:
      07a115f7d9 ovs-monitor-ipsec: Fix generated strongSwan ipsec.conf for IPv6.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-41
changelog:
  - Merging upstream branch-2.16 [RH git: f1ca7b8ac3]
      Commit list:
      2571b1a464 ofproto-dpif: Fix issue with non-reversible actions on a patch ports.


author: Ilya Maximets <i.maximets@redhat.com> - 2.16.0-42
changelog:
  - raft: Only allow followers to snapshot. [RH git: 915efc8c00] (#2044614)
      commit bf07cc9cdb2f37fede8c0363937f1eb9f4cfd730
      Author: Dumitru Ceara <dceara@redhat.com>
      Date:   Mon Dec 13 20:46:03 2021 +0100
      
          raft: Only allow followers to snapshot.
      
          Commit 3c2d6274bcee ("raft: Transfer leadership before creating
          snapshots.") made it such that raft leaders transfer leadership before
          snapshotting.  However, there's still the case when the next leader to
          be is in the process of snapshotting.  To avoid delays in that case too,
          we now explicitly allow snapshots only on followers.  Cluster members
          will have to wait until the current election is settled before
          snapshotting.
      
          Given the following logs taken from an OVN_Southbound 3-server cluster
          during a scale test:
      
          S1 (old leader):
            19:07:51.226Z|raft|INFO|Transferring leadership to write a snapshot.
            19:08:03.830Z|ovsdb|INFO|OVN_Southbound: Database compaction took 12601ms
            19:08:03.940Z|raft|INFO|server 8b8d is leader for term 43
      
          S2 (follower):
            19:08:00.870Z|raft|INFO|server 8b8d is leader for term 43
      
          S3 (new leader):
            19:07:51.242Z|raft|INFO|received leadership transfer from f5c9 in term 42
            19:07:51.244Z|raft|INFO|term 43: starting election
            19:08:00.805Z|ovsdb|INFO|OVN_Southbound: Database compaction took 9559ms
            19:08:00.869Z|raft|INFO|term 43: elected leader by 2+ of 3 servers
      
          We see that the leader to be (S3) receives the leadership transfer,
          initiates the election and immediately after starts a snapshot that
          takes ~9.5 seconds.  During this time, S2 votes for S3 electing it
          as cluster leader but S3 doesn't effectively become leader until it
          finishes snapshotting, essentially keeping the cluster without a
          leader for up to ~9.5 seconds.
      
          With the current change, S3 will delay compaction and snapshotting until
          the election is finished.
      
          The only exception is the case of single-node clusters for which we
          allow the node to snapshot regardless of role.
      
          Acked-by: Han Zhou <hzhou@ovn.org>
          Signed-off-by: Dumitru Ceara <dceara@redhat.com>
          Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
      
      Reported-at: https://bugzilla.redhat.com/2044614
      Signed-off-by: Ilya Maximets <i.maximets@redhat.com>


author: Ilya Maximets <i.maximets@redhat.com> - 2.16.0-43
changelog:
  - ovsdb: storage: Randomize should_snapshot checks when the minimum time passed. [RH git: abe61535ca] (#2044614)
      commit 339f97044e3c2312fbb65b932fa14a181acf40d5
      Author: Ilya Maximets <i.maximets@ovn.org>
      Date:   Mon Dec 13 16:43:33 2021 +0100
      
          ovsdb: storage: Randomize should_snapshot checks when the minimum time passed.
      
          Snapshots are scheduled for every 10-20 minutes.  It's a random value
          in this interval for each server.  Once the time is up, but the maximum
          time (24 hours) not reached yet, ovsdb will start checking if the log
          grew a lot on every iteration.  Once the growth is detected, compaction
          is triggered.
      
          OTOH, it's very common for an OVSDB cluster to not have the log growing
          very fast.  If the log didn't grow 2x in 20 minutes, the randomness of
          the initial scheduled time is gone and all the servers are checking if
          they need to create snapshot on every iteration.  And since all of them
          are part of the same cluster, their logs are growing with the same
          speed.  Once the critical mass is reached, all the servers will start
          creating snapshots at the same time.  If the database is big enough,
          that might leave the cluster unresponsive for an extended period of
          time (e.g. 10-15 seconds for OVN_Southbound database in a larger scale
          OVN deployment) until the compaction completed.
      
          Fix that by re-scheduling a quick retry if the minimal time already
          passed.  Effectively, this will work as a randomized 1-2 min delay
          between checks, so the servers will not synchronize.
      
          Scheduling function updated to not change the upper limit on quick
          reschedules to avoid delaying the snapshot creation indefinitely.
          Currently quick re-schedules are only used for the error cases, and
          there is always a 'slow' re-schedule after the successful compaction.
          So, the change of a scheduling function doesn't change the current
          behavior much.
      
          Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
          Acked-by: Han Zhou <hzhou@ovn.org>
          Acked-by: Dumitru Ceara <dceara@redhat.com>
      
      Reported-at: https://bugzilla.redhat.com/2044614
      Signed-off-by: Ilya Maximets <i.maximets@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-44
changelog:
  - Merging upstream branch-2.16 [RH git: d202cd6da1]
      Commit list:
      34c830c540 ovsdb-idl: ovsdb_idl_loop_destroy must also destroy the committing txn.
      13009736b2 ovsdb-cs: Clear last_id on reconnect if condition changes in-flight.
      017e2ae50e ofp-flow: Skip flow reply if it exceeds the maximum message size.
      e0c6f92a95 ovsdb-cs: Fix ignoring of the last id from the initial monitor reply. (#2044624)


author: Ilya Maximets <i.maximets@redhat.com> - 2.16.0-45
changelog:
  - ovsdb: transaction: Keep one entry in the transaction history. [RH git: 7665f42d12] (#2044621)
      commit 6e13565dd32fb2cf5517f51ca06956e2052c4bba
      Author: Ilya Maximets <i.maximets@ovn.org>
      Date:   Sun Dec 19 15:09:38 2021 +0100
      
          ovsdb: transaction: Keep one entry in the transaction history.
      
          If a single transaction exceeds the size of the whole database (e.g.,
          a lot of rows got removed and new ones added), transaction history will
          be drained.  This leads to sending UUID_ZERO to the clients as the last
          transaction id in the next monitor update, because monitor doesn't
          know what was the actual last transaction id.  In case of a re-connect
          that will cause re-downloading of the whole database, since the
          client's last_id will be out of sync.
      
          One solution would be to store the last transaction ID separately
          from the actual transactions, but that will require a careful
          management in cases where database gets reset and the history needs
          to be cleared.  Keeping the one last transaction instead to avoid
          the problem.  That should not be a big concern in terms of memory
          consumption, because this last transaction will be removed from the
          history once the next transaction appeared.  This is also not a concern
          for a fast re-sync, because this last transaction will not be used
          for the monitor reply; it's either client already has it, so no need
          to send, or it's a history miss.
      
          The test updated to not check the number of atoms if there is only
          one transaction in the history.
      
          Fixes: 317b1bfd7dd3 ("ovsdb: Don't let transaction history grow larger than the database.")
          Acked-by: Mike Pattrick <mkp@redhat.com>
          Acked-by: Han Zhou <hzhou@ovn.org>
          Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
      
      Reported-at: https://bugzilla.redhat.com/2044621
      Signed-off-by: Ilya Maximets <i.maximets@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-46
changelog:
  - Merging upstream branch-2.16 [RH git: 513117cbb0]
      Commit list:
      16575362dc acinclude: Detect avx512 vpopcntdq compiler support.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-47
changelog:
  - Merging upstream branch-2.16 [RH git: 6e6f66ffd0]
      Commit list:
      0276bdb30a ofproto-dpif-upcall: Fix n_revalidators on upcall show.


author: Michael Santana <msantana@redhat.com> - 2.16.0-48
changelog:
  - Merging upstream branch-2.16 [RH git: 9d51785142]
      Commit list:
      1ec567a752 ci: Install wheel before installing any other python packages.
      031a99cef0 odp-util: Fix tunnel key attr for GTP-U.
      558699c73c ovsdb-idl: Only process successful txn in ovsdb_idl_loop_run.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-49
changelog:
  - Merging upstream branch-2.16 [RH git: 4541c91b99]
      Commit list:
      418e6a0b8e dpif-netdev: fix vlan and ipv4 parsing in avx512


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-50
changelog:
  - Merging upstream branch-2.16 [RH git: c5ad7f71c5]
      Commit list:
      867e586b45 tc: Fix incorrect TC rule for decap+encap datapath flow.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-51
changelog:
  - Merging upstream branch-2.16 [RH git: 7b6570c65f]
      Commit list:
      0954c2911d ofproto: Fix ipfix not always sampling on egress. (#2016346)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-52
changelog:
  - Merging upstream branch-2.16 [RH git: bba08b5363]
      Commit list:
      8e23c06f24 dpif-netdev-dpcls: Make subtable reprobe thread-safe.
      ac0e3dd3ba ci: Fix typo in variable name.
      fc25e0397a dp-packet: Ensure packet base is always non-NULL.
      dbae56e702 bfd: lldp: stp: Fix misaligned packet field access.
      ee17b06cf9 ovsdb-idlc: Avoid accessing member within NULL idl index cursors.
      1d799a5d17 stopwatch: Fix buffer underflow when computing percentiles.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-53
changelog:
  - Merging upstream branch-2.16 [RH git: b2df459e49]
      Commit list:
      dcde9771c5 ovsdb-idl: Fix use-after-free when destroying an IDL loop.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-54
changelog:
  - Merging upstream branch-2.16 [RH git: ac5da61d03]
      Commit list:
      dee52795e6 datapath-windows: Fix NXM_OF_IP_TOS issue


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-55
changelog:
  - Merging upstream branch-2.16 [RH git: 970214133d]
      Commit list:
      0168e7989d reconnect: Fix broken inactivity probe if there is no other reason to wake up.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-56
changelog:
  - Merging upstream branch-2.16 [RH git: e4d6d108a3]
      Commit list:
      fb4767b472 dpif-netdev: Fix a race condition in deletion of offloaded flows.
      3e72eae031 dpif-netdev: Move port flush after datapath reconfiguration.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-57
changelog:
  - Merging upstream branch-2.16 [RH git: 897937f6d3]
      Commit list:
      9598f0529c ovsdb: raft: Fix inability to join the cluster after interrupted attempt. (#2033514)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-59
changelog:
  - Merging upstream branch-2.16 [RH git: 832e52bea7]
      Commit list:
      1515e085b9 tc: Fix stats byte count on fragmented packets.
      7a3b46d517 compat: Add gen_stats include to define tc hw stats.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-60
changelog:
  - Merging upstream branch-2.16 [RH git: 67312d8bee]
      Commit list:
      43882d8372 ofproto-dpif: Trigger revalidation when ipfix config set.
      218bb05fb2 system-tso: Skip encap tests when userspace TSO is enabled.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-61
changelog:
  - Merging upstream branch-2.16 [RH git: 0e0cf86cf5]
      Commit list:
      d5d2bd3c09 ofproto: Use xlate map for uuid lookups.
      d158b29fb6 ofproto: Add refcount to ofproto to fix ofproto use-after-free.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-62
changelog:
  - Merging upstream branch-2.16 [RH git: 561b178a3d]
      Commit list:
      47b5374280 system-dpdk: Fix mfex autovalidator tests.
      98a74bd487 ofp-prop: Silence the 'may be uninitialized' warning.
      ab4f30e02b ovsdb-cluster.at: Avoid test failures due to different hashing.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-63
changelog:
  - Merging upstream branch-2.16 [RH git: a3c48a5aeb]
      Commit list:
      c50a0f080d system-traffic.at: Fix flaky DNAT load balancing test.
      9928344ea7 dpif-netdev: Keep orig_in_port as a field of the flow.
      aee2e66287 tests: Fix incorrect usage of OVS_WAIT_UNTIL.
      5881545bd0 odp-util: Fix output for tc to be equal to kernel.
      4a80c322f9 netdev-offload-tc: Fix IP and port ranges in flower returns.
      49e0bb72bc netdev-offload-tc: Fix use of ICMP values instead of masks defines.
      0fb545c7d9 netdev-offload-tc: Always include conntrack information to tc.
      13a3f57976 netdev-offload-tc: Check for valid netdev ifindex in flow_put.
      6e72fd96d3 netdev-offload-tc: Set the correct VLAN_VID and VLAN_PCP masks.
      e43157f303 netdev-offload-tc: Add debug logs on tc rule verify failures.
      37297e7ee6 tc: Keep header rewrite actions order.
      823be413ec dpdk: Use DPDK 20.11.4 release


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-64
changelog:
  - Merging upstream branch-2.16 [RH git: 32008eb008]
      Commit list:
      1570924c3f ovsdb: raft: Fix inability to read the database with DNS host names. (#2055097)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-65
changelog:
  - Merging upstream branch-2.16 [RH git: b4c45acc47]
      Commit list:
      7644c924e8 sparse: bump recommended version and include headers.
      20b87feba9 rculist: use multi-variable helpers for loop macros.
      05a440fafb hindex: use multi-variable iterators.
      04dca15004 cmap: use multi-variable iterators.
      80e64f712d hmap: implement UB-safe hmap pop iterator.
      3b4b0af690 hmap: use multi-variable helpers for hmap loops.
      05e899ea8f list: use multi-variable helpers for list loops.
      d2406399ae util: add helpers to overload SAFE macro.
      f22f9d947a util: add safe multi-variable iterators.
      72c3e8627c util: add multi-variable loop iterator macros.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-66
changelog:
  - Merging upstream branch-2.16 [RH git: 1418edaf18]
      Commit list:
      26189fd264 dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id.
      a5af081bc6 alb.at: Add tests for cross-numa polling.
      78c8f8a7f6 dpif-netdev: Fix PMD auto load balance with pmd-rxq-isolate.
      6731e581c4 pmd.at: Add tests for multi non-local numa pmds.
      60652bb3eb dpif-netdev: Fix non-local numa selection for more than two numas.
      c113039503 ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal().


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-67
changelog:
  - Merging upstream branch-2.16 [RH git: 4936a7194b]
      Commit list:
      2c666b9791 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-68
changelog:
  - Merging upstream branch-2.16 [RH git: 2ee98fa0ff]
      Commit list:
      be8b35fddf Prepare for 2.16.4.
      d8639f81c1 Set release date for 2.16.3.
      71a5a38c83 NEWS: Highlight libopenvswitch API change caused by UB fixes.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-69
changelog:
  - Merging upstream branch-2.16 [RH git: c9969bac2f]
      Commit list:
      2afa9d2285 cirrus: Update FreeBSD versions.


author: Timothy Redaelli <tredaelli@redhat.com> - 2.16.0-70
changelog:
  - Really set RTE_ETH_MAXPORTS to 1024 [RH git: 104da44ad6]
      Fixes: 81ff7c5a60f0 ("Change RTE_ETH_MAXPORTS to 1024")


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-71
changelog:
  - Merging upstream branch-2.16 [RH git: a0490a292c]
      Commit list:
      271bea0ee0 ofproto-xlate: Fix crash when forwarding packet between legacy_l3 tunnels.
      9f9d59aeae system-traffic: Fix fragment reassembly with L3 L4 protocol information.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-72
changelog:
  - Merging upstream branch-2.16 [RH git: 1c2e3ff275]
      Commit list:
      a51dd4685d ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. (#393566
      2060552)


author: Timothy Redaelli <tredaelli@redhat.com> - 2.16.0-73
changelog:
  - vhost: fix FD leak with inflight messages [RH git: fafbd8f642]
      [ upstream commit af74f7db384ed149fe42b21dbd7975f8a54ef227 ]
      
      Even if unlikely, a buggy vhost-user master might attach fds to inflight
      messages. Add checks like for other types of vhost-user messages.
      
      Fixes: d87f1a1cb7b6 ("vhost: support inflight info sharing")
      
      Signed-off-by: David Marchand <david.marchand@redhat.com>
      Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>


author: Timothy Redaelli <tredaelli@redhat.com> - 2.16.0-74
changelog:
  - vhost: fix queue number check when setting inflight FD [RH git: d084ce15a7]
      [ upstream commit 6442c329b9d2ded0f44b27d2016aaba8ba5844c5 ]
      
      In function vhost_user_set_inflight_fd, queue number in inflight
      message is used to access virtqueue. However, queue number could
      be larger than VHOST_MAX_VRING and cause write OOB as this number
      will be used to write inflight info in virtqueue structure. This
      patch checks the queue number to avoid the issue and also make
      sure virtqueues are allocated before setting inflight information.
      
      Fixes: ad0a4ae491fe ("vhost: checkout resubmit inflight information")
      
      Reported-by: Wenxiang Qian <leonwxqian@gmail.com>
      Signed-off-by: Chenbo Xia <chenbo.xia@intel.com>
      Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-75
changelog:
  - Merging upstream branch-2.16 [RH git: 0c22edcd05]
      Commit list:
      df77b74438 ofproto-dpif-xlate: Remove mirror assert.
      c81571d602 netdev-dpdk: Fix tx drops statistic for a down netdev.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-76
changelog:
  - Merging upstream branch-2.16 [RH git: 72426100fe]
      Commit list:
      6a304c7866 tests: Properly kill ovsdb test processes.
      44dfae2991 ovs-save: Get highest ofp version error.
      63754ac391 netdev-linux: Properly access 32-bit aligned rtnl_link_stats64 structs.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-77
changelog:
  - Merging upstream branch-2.16 [RH git: 3e3d3725d3]
      Commit list:
      72bad27674 Carefully release NBL in Windows


author: Ilya Maximets <i.maximets@redhat.com> - 2.16.0-78
changelog:
  - Merging upstream branch-2.16 [RH git: d7d5f09849]
      Commit list:
      c8c78a76e5 ovsdb: raft: Fix transaction double commit due to lost leadership. (#2046340)
      2809af022a Revert "odp-util: Always report ODP_FIT_TOO_LITTLE for IGMP."
      90e31552be ofproto-dpif: Trigger revalidation if ct tp changes.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-79
changelog:
  - Merging upstream branch-2.16 [RH git: c224775aed]
      Commit list:
      840c3fcb12 ofproto-dpif: Fix meter use-after-free.
      77c89b0d25 ovs-rcu: Add ovsrcu_barrier.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-80
changelog:
  - Merging upstream branch-2.16 [RH git: 45dcf738b0]
      Commit list:
      87922569f3 ofproto-dpif-xlate: Fix internal CT state for non-recirc traffic.
      51aa8dd106 classifier: Adjust segment boundary to execute prerequisite processing. (#2081773)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-81
changelog:
  - Merging upstream branch-2.16 [RH git: 4e6f367244]
      Commit list:
      64f289dc97 Prepare for 2.16.5.
      b614d27ebe Set release date for 2.16.4.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-82
changelog:
  - Merging upstream branch-2.16 [RH git: c4dc313aae]
      Commit list:
      63f21bd205 drop-stats.at: Fix frequent failures of the recursion too deep test.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-83
changelog:
  - Merging upstream branch-2.16 [RH git: 3a0b236aca]
      Commit list:
      2266e91acd conntrack: Fix incorrect bit shift while hashing nat range.
      7cfbd3921c odp-util: Fix unaligned access to tunnel id.
      b46d9ba9f9 ofpbuf: Fix offsetting a NULL pointer in ofpbuf_reserve.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-84
changelog:
  - Merging upstream branch-2.16 [RH git: 058ebc82c2]
      Commit list:
      19f20b0da7 dpif-netdev-extract-avx512: Protect GCC builtin usage.
      1439c72fa3 ovsdb: Fix memory leak on error path in ovsdb_file_read__().
      8456befa34 odp-util: Ignore unknown attributes in parse_key_and_mask_to_match(). (#2089331)
      222a52c86e lldp: Fix lldp memory leak.
      b04b30af65 ipfix: Trigger revalidation if ipfix options changes.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-85
changelog:
  - Merging upstream branch-2.16 [RH git: df1ebc7699]
      Commit list:
      0fe91ee5b0 dpif-netdev: Refactor AVX512 runtime checks. (#2100393)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-86
changelog:
  - Merging upstream branch-2.16 [RH git: c1bbe117f8]
      Commit list:
      2e6d28fafe dpif-netdev: Fix leak of AVX512 DPIF scratch pad.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-7
changelog:
  - Merging upstream branch-2.17 [RH git: 6cd8201ead]
      Commit list:
      3a2eef7927 python: idl: Set cond_changed to true if condition change requested.
      d05ccf288d dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id.
      79e291f983 alb.at: Add tests for cross-numa polling.
      9c3b74fb24 dpif-netdev: Fix PMD auto load balance with pmd-rxq-isolate.
      8580ff9ddd pmd.at: Add tests for multi non-local numa pmds.
      6bf4eeddbb dpif-netdev: Fix non-local numa selection for more than two numas.
      c41434b3b7 dpif-netdev: Fix typo in function name.
      e0aa5e1329 python: idl: Set cond_changed to false if last id is zero.
      8da40d31c7 ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal().
      63a903ab42 ofproto/ofproto-dpif: Fix dpif_type for userspace tunnels.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-8
changelog:
  - Merging upstream branch-2.17 [RH git: 11b19654f7]
      Commit list:
      14301b3a3c netdev-offload-tc: Check for ct_state flag combinations that are not offloadable.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-9
changelog:
  - Merging upstream branch-2.17 [RH git: 4b4333522a]
      Commit list:
      bd1a3b6b49 Prepare for 2.17.2.
      41bb202fb3 Set release date for 2.17.1.
      8f42d4f597 NEWS: Highlight libopenvswitch API change caused by UB fixes.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-12
changelog:
  - Merging upstream branch-2.17 [RH git: 7a9f21a896]
      Commit list:
      60e7badd6e dpif-netdev-avx512: Fix ubsan shift error in bitmasks.
      9cc329ec5b python: Politely handle misuse of table.condition.
      0631be2b5a ofproto-xlate: Fix crash when forwarding packet between legacy_l3 tunnels.
      df97903099 system-traffic: Fix fragment reassembly with L3 L4 protocol information.
      ba159ee0f9 cirrus: Update FreeBSD versions.


author: Timothy Redaelli <tredaelli@redhat.com> - 2.17.0-13
changelog:
  - vhost: fix FD leak with inflight messages [RH git: bff69b098f]
      [ upstream commit af74f7db384ed149fe42b21dbd7975f8a54ef227 ]
      
      Even if unlikely, a buggy vhost-user master might attach fds to inflight
      messages. Add checks like for other types of vhost-user messages.
      
      Fixes: d87f1a1cb7b6 ("vhost: support inflight info sharing")
      
      Signed-off-by: David Marchand <david.marchand@redhat.com>
      Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>


author: Timothy Redaelli <tredaelli@redhat.com> - 2.17.0-14
changelog:
  - vhost: fix queue number check when setting inflight FD [RH git: 2ac21853a2]
      [ upstream commit 6442c329b9d2ded0f44b27d2016aaba8ba5844c5 ]
      
      In function vhost_user_set_inflight_fd, queue number in inflight
      message is used to access virtqueue. However, queue number could
      be larger than VHOST_MAX_VRING and cause write OOB as this number
      will be used to write inflight info in virtqueue structure. This
      patch checks the queue number to avoid the issue and also make
      sure virtqueues are allocated before setting inflight information.
      
      Fixes: ad0a4ae491fe ("vhost: checkout resubmit inflight information")
      
      Reported-by: Wenxiang Qian <leonwxqian@gmail.com>
      Signed-off-by: Chenbo Xia <chenbo.xia@intel.com>
      Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-15
changelog:
  - Merging upstream branch-2.17 [RH git: e706ea8148]
      Commit list:
      522c46884d python: idl: Raise AttributeError from uuid_to_row.
      cb24c524e4 ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. (#2060552)
      a665b75dec dpif-netdev-avx512: Fix overflow of UINT32_C(1).


author: Ben Pfaff <blp@ovn.org> - 21.06.0-8
changelog:
  - tests: Fix "vlan traffic for external network with distributed..."
    [Gerrit: ca26e77c4206a39ae6eab4a1d430ef04b726b640]
    [Upstream: 5453cc8ca5535e3f33d1b191929e1a3c9ad30f20]


author: Ihar Hrachyshka <ihrachys@redhat.com> - 21.06.0-9
changelog:
  - Disable ARP/NA responders for vlan-passthru switches
    [Gerrit: 56fbcfaf71d9a6df0b4cdee583c8d17ca7a82aab]
    [Upstream: ea57f666f6eef1eb1d578f0e975baa14c5d23ec9]


author: Dumitru Ceara <dceara@redhat.com> - 21.06.0-10
changelog:
  - northd-ddlog: Fix IP family match for DNAT flows.
    [Gerrit: 518ea2e15df2c77fc19afe74b68d616983638743]
    [Upstream: 38467229905bdf09a3afa325eaa7a98183f44c72]


author: Dumitru Ceara <dceara@redhat.com> - 21.06.0-11
changelog:
  - northd: Fix multicast table full comparison. (#1979870)
    [Gerrit: 38f44df1b8a0ed1ebb86183de29d9e5c3423abdb]
    [Upstream: 969c98d7297b526c704c6fd2a7138f584f9ad577]


author: Ihar Hrachyshka <ihrachys@redhat.com> - 21.06.0-12
changelog:
  - Don't suppress localport traffic directed to external port (#1974062)
    [Gerrit: 330e6e7400e1d5e4e6ef4fc6446eeaa945ac6a13]
    [Upstream: 1148580290d0ace803f20aeaa0241dd51c100630]


author: Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 21.06.0-13
changelog:
  - northd: do not centralize traffic for unclaimed virtual ports
    [Gerrit: 5b6826906a76779b527d72d1c49d211ce492e62e]
    [Upstream: N/A]


author: Dumitru Ceara <dceara@redhat.com> - 21.06.0-14
changelog:
  - ovn-controller: Detect OVS datapath capabilities.
    [Gerrit: ca1df0396e6e6eb016c3cad82db7c49cc05ec99a]
    [Upstream: 56e2cd3a2f06b79b7d57cc8637fc0d258652aff5]


author: Dumitru Ceara <dceara@redhat.com> - 21.06.0-15
changelog:
  - ovn-controller: Handle DNAT/no-NAT conntrack tuple collisions. (#1939676)
    [Gerrit: abfd62cb228b7d311ae7cae18adfe9cfcf68affc]
    [Upstream: 58683a4271e6a885f2f2aea27f3df88e69a5c388]


author: Dumitru Ceara <dceara@redhat.com> - 21.06.0-16
changelog:
  - ovn.at: Fix "Symmetric IPv6 ECMP reply flows" test.
    [Gerrit: 801f6c69c3bb45f981135ac6c197fdbd3f18118d]
    [Upstream: 4e6c498068dc4fa9546d3661f78f0a42e99c74bb]


author: Numan Siddique <numans@ovn.org> - 21.06.0-17
changelog:
  - ovn-controller: Split logical flow and physical flow processing. (#1986484)
    [Gerrit: 6e1e90064ad1f5769fdc96e3b735ee236c30b7e2]
    [Upstream: ceb12c9190a124c70bc938e8e1bea17612b498be]


author: Dumitru Ceara <dceara@redhat.com> - 21.12.0-5
changelog:
  - physical: Add remote parent ports to OFTABLE_REMOTE_OUTPUT flows. (#2036970)
    [Gerrit: 627b25bd14085a78f1f9611f2a218ce639515e26]
    [Upstream: e101e45f355a91e277630243e64897f91f13f8bc]


author: Dumitru Ceara <dceara@redhat.com> - 21.12.0-6
changelog:
  - pinctrl: Ensure proper alignment when using pinctrl_compose_ipv*().
    [Gerrit: 31e933469d862915b8c83131f72728fe32ecac51]
    [Upstream: N/A]


author: Dumitru Ceara <dceara@redhat.com> - 21.12.0-7
changelog:
  - pinctrl: Ensure no misaligned accesses for SCTP packets.
    [Gerrit: b5083fdb4dce839fe70ce5e1c059f11c917105f4]
    [Upstream: N/A]


author: Dumitru Ceara <dceara@redhat.com> - 21.12.0-8
changelog:
  - pinctrl: Ensure aligned accesses when processing DNS.
    [Gerrit: 67829e142dcc71b1f8e4f01aab9e73333420a76f]
    [Upstream: N/A]


author: Dumitru Ceara <dceara@redhat.com> - 21.12.0-9
changelog:
  - pinctrl: Ensure packet headers are properly aligned for ICMP errors.
    [Gerrit: ca764d60c6cfd4e7121b15faf6ca3a026928da4e]
    [Upstream: N/A]


author: Dumitru Ceara <dceara@redhat.com> - 21.12.0-10
changelog:
  - pinctrl: Avoid misaligned access to controller_event_opt_header.
    [Gerrit: 2280d3a3f63e026657564f34793b9143323afaf6]
    [Upstream: N/A]


author: Dumitru Ceara <dceara@redhat.com> - 21.12.0-11
changelog:
  - pinctrl: Avoid misaligned access to ovs_ra_msg.
    [Gerrit: 290523cdfadc5cb401939cc21c1f8de66a6b79b2]
    [Upstream: N/A]


author: Mohammad Heib <mheib@redhat.com> - 22.03.0-13
changelog:
  - controller/pinctrl: avoid accessing invalid memory (#2052945)
  [Gerrit: 55a0ab5d2971daaf22e3d935f623bf7548a3df98]
  [Upstream: 6bc6002601ea161a287bcf53524e9282ab97c31b]


author: Xavier Simonart <xsimonar@redhat.com> - 22.03.0-14
changelog:
  - northd: avoid writing to IDL in parallel when using northd parallelization
  [Gerrit: 6410cb7906121bf2ebec3698d53bcfcb580ca4f6]
  [Upstream: 741a135fa1db9e10b725d4b69c6da455f732b89b]


author: Han Zhou <hzhou@ovn.org> - 22.03.0-15
changelog:
  - ofctrl.c: Check installed flow when merging tracked flow changes. (#2071272)
  [Gerrit: 92cdada0e150e937e19f52c98a0c6a6dba7a84e0]
  [Upstream: 9c6d285ef2a65aef032cd60f9a9fe16cad7c4222]


author: Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 22.03.0-16
changelog:
  - system-ovn: fix CoPP test failures (#2073060)
  [Gerrit: 388446ff27650773716ebcbc332424b1bf82bad1]
  [Upstream: e922c05dbb0c0ca70c98bd0b24833248ff5d458b]


author: Ales Musil <amusil@redhat.com> - 22.03.0-17
changelog:
  - pinctrl.c: Send GARP only on chassis atached to l3gw (#2062580)
  [Gerrit: 77ec310dda51c78c1897011ba851612787fcc6c6]
  [Upstream: 77ec310dda51c78c1897011ba851612787fcc6c6]


author: Ihar Hrachyshka <ihrachys@redhat.com> - 22.03.0-18
changelog:
  - Stop sending garps when binding not bound to chassis
  [Gerrit: 65088824dbca07dfdf3402d1775d3af76a304ef4]
  [Upstream: 65088824dbca07dfdf3402d1775d3af76a304ef4]


author: Numan Siddique <numans@ovn.org> - 22.03.0-19
changelog:
  - ovn-northd: Add flow to use eth.src if nd.tll is 0 in put_nd() action. (#2078026)
  [Gerrit: bd0ee4c1103ca5eaf834e48093205cacddaadf31]
  [Upstream: 80187a8031b6abe01fb23657a9bed2372ae23af5]


author: Mark Michelson <mmichels@redhat.com> - 22.03.0-20
changelog:
  - Get OVS branch updated to proper base version for upcoming changes.
  [Gerrit: 367051dacab28dbe875aba9e1920b5693cf284c3]
  [Upstream: 367051dacab28dbe875aba9e1920b5693cf284c3]


author: Adrian Moreno <amorenoz@redhat.com> - 22.03.0-21
changelog:
  - treewide: bump ovs and fix problematic loops
  [Gerrit: 985ef4580ac6558859e104bad6fd5e2a68af79f7]
  [Upstream: 985ef4580ac6558859e104bad6fd5e2a68af79f7]


author: Adrian Moreno <amorenoz@redhat.com> - 22.03.0-22
changelog:
  - parallel-hmap: rewrite iterator using multivar helpers
  [Gerrit: 3da85a6660776548ddafaa9759b260b0dac38b4b]
  [Upstream: 3da85a6660776548ddafaa9759b260b0dac38b4b]


