Format: 1.8 Date: Mon, 23 Nov 2015 17:02:22 -0500 Source: neutron Binary: neutron-server neutron-common neutron-plugin-cisco neutron-plugin-nec neutron-plugin-nec-agent neutron-plugin-bigswitch neutron-plugin-bigswitch-agent neutron-plugin-hyperv neutron-plugin-brocade neutron-plugin-plumgrid neutron-plugin-metaplugin neutron-plugin-vmware neutron-plugin-nicira neutron-l3-agent neutron-dhcp-agent neutron-metadata-agent neutron-lbaas-agent python-neutron neutron-plugin-openvswitch neutron-plugin-ml2 neutron-plugin-openvswitch-agent neutron-plugin-linuxbridge neutron-plugin-linuxbridge-agent neutron-plugin-ryu neutron-plugin-ryu-agent neutron-plugin-midonet neutron-plugin-mlnx neutron-plugin-mlnx-agent neutron-vpn-agent neutron-plugin-vpn-agent neutron-metering-agent neutron-plugin-metering-agent neutron-plugin-openflow-agent neutron-plugin-ibm neutron-plugin-ibm-agent neutron-plugin-sriov-agent neutron-plugin-oneconvergence neutron-plugin-oneconvergence-agent neutron-plugin-nuage neutron-plugin-opencontrail Architecture: source Version: 1:2014.2.4-0ubuntu1~cloud1~ubuntu14.04.1~ppa201511231702 Distribution: trusty Urgency: medium Maintainer: Ubuntu Developers Changed-By: Corey Bryant Description: neutron-common - Neutron is a virtual network service for Openstack - common neutron-dhcp-agent - Neutron is a virtual network service for Openstack - DHCP agent neutron-l3-agent - Neutron is a virtual network service for Openstack - l3 agent neutron-lbaas-agent - Neutron is a virtual network service for Openstack - LBaaS agent neutron-metadata-agent - Neutron is a virtual network service for Openstack - metadata age neutron-metering-agent - Neutron is a virtual network service for Openstack - metering age neutron-plugin-bigswitch - Neutron is a virtual network service for Openstack - BigSwitch pl neutron-plugin-bigswitch-agent - Neutron is a virtual network service for Openstack - BigSwitch pl neutron-plugin-brocade - Neutron is a virtual network service for Openstack - Brocade plug neutron-plugin-cisco - Neutron is a virtual network service for Openstack - Cisco plugin neutron-plugin-hyperv - Neutron is a virtual network service for Openstack - Hyper-V plug neutron-plugin-ibm - Neutron is a virtual network service for Openstack - IBM SDN plug neutron-plugin-ibm-agent - Neutron is a virtual network service for Openstack - IBM agent neutron-plugin-linuxbridge - Neutron is a virtual network service for Openstack - linuxbridge neutron-plugin-linuxbridge-agent - Neutron is a virtual network service for Openstack - linuxbridge neutron-plugin-metaplugin - Neutron is a virtual network service for Openstack - Metaplugin p neutron-plugin-metering-agent - transitional dummy package neutron-plugin-midonet - Neutron is a virtual network service for Openstack - Midonet plug neutron-plugin-ml2 - Neutron is a virtual network service for Openstack - ML2 plugin neutron-plugin-mlnx - Neutron is a virtual network service for Openstack - Mellanox plu neutron-plugin-mlnx-agent - Neutron is a virtual network service for Openstack - Mellanox plu neutron-plugin-nec - Neutron is a virtual network service for Openstack - NEC plugin neutron-plugin-nec-agent - Neutron is a virtual network service for Openstack - NEC plugin a neutron-plugin-nicira - transitional dummy package neutron-plugin-nuage - Neutron is a virtual network service for Openstack - Nuage plugin neutron-plugin-oneconvergence - Neutron is a virtual network service for Openstack - One Converge neutron-plugin-oneconvergence-agent - Neutron is a virtual network service for Openstack - One Converge neutron-plugin-opencontrail - Neutron is a virtual network service for Openstack - OpenContrail neutron-plugin-openflow-agent - Neutron is a virtual network service for Openstack - Openflow age neutron-plugin-openvswitch - Neutron is a virtual network service for Openstack - Open vSwitch neutron-plugin-openvswitch-agent - Neutron is a virtual network service for Openstack - Open vSwitch neutron-plugin-plumgrid - Neutron is a virtual network service for Openstack - PLUMgrid plu neutron-plugin-ryu - Neutron is a virtual network service for Openstack - RYU plugin neutron-plugin-ryu-agent - Neutron is a virtual network service for Openstack - RYU plugin a neutron-plugin-sriov-agent - Neutron is a virtual network service for Openstack - IBM agent neutron-plugin-vmware - Neutron is a virtual network service for Openstack - VMware plugi neutron-plugin-vpn-agent - transitional dummy package neutron-server - Neutron is a virtual network service for Openstack - server neutron-vpn-agent - Neutron is a virtual network service for Openstack - VPN agent python-neutron - Neutron is a virutal network service for Openstack - Python libra Launchpad-Bugs-Fixed: 1185019 1240712 1323729 1371137 1379779 1398952 1418695 1419117 1443429 1518323 Changes: neutron (1:2014.2.4-0ubuntu1~cloud1~ubuntu14.04.1~ppa201511231702) trusty; urgency=medium . * No-change backport to trusty . neutron (1:2014.2.4-0ubuntu1~cloud1) UNRELEASED; urgency=medium . * d/rules: Prevent dh_python2 from guessing dependencies. . neutron (1:2014.2.4-0ubuntu1~cloud0) trusty-juno; urgency=medium . * Resynchronize with stable/juno (6687864) (LP: #1518323): - [b1263ff] Resubmit of "Remove bridge cleanup call" fix - [fb58b4b] Fix inconsistency in DHCPv6 hosts and options generation - [0aec542] Do not log an error when deleting a linuxbridge does not exist - [c9fb192] usage_audit: Fix usage_audit to work with ML2 - [58904f3] Process user iptables rules before INVALID - [f0bb982] Wrap ML2 delete_port with db retry decorator - [d567d57] Fix ipset can't be destroyed when last rule is deleted - [1b73fbd] Add ARP spoofing protection for LinuxBridge agent - [2fb89ce] ovs: don't use ARP responder for IPv6 addresses - [ebb0c54] Stop device_owner from being set to 'network:*' - [2f344ee] Fix a wrong condition for the _purge_metering_info function - [5bc885d] NSX-mh: perform appropriate pre-delete checks - [429bb32] NSX-mh: use router_distributed flag - [6410e01] Remove bridge cleanup call - [1baa2d7] NSX-mh: Failover controller connections on socket failures - [34f2d65] Modify ipset functional tests to pass on older machines - [0e258b0] NSX-mh: Prevent failures on router delete - [15cb18b] Allow to request metadata proxy only with redirection - [580f6c6] Allow IptablesManager to manage mangle table - [98b6cd8] Adds garp_master_repeat and garp_master_refresh to keepalived.conf - [e0486f3] Add support for dhcp extra opt - [9cfcd32] Lower log level of errors caused by user requests to INFO - [73be7e7] MH: Limit enabled versions for agentless mode - [17c6bc5] Arista ML2 driver should ignore non-vlan networks - [07d3d44] Randomize tunnel id query to avoid contention - [4b8db7b] In Arista ML2 driver Reconfigure VLAN on VM migration - [af0edbe] Hyper-V: Fix for ICMP rule deletion - [f548775] Allow to request metadata proxy only from internal interfaces - [ab3046d] Fix tenant-id in Arista ML2 driver to support HA router - [4cd1b58] Refactor retry mechanism used in some DB operations - [86701a3] NSX QoS ext: RXTX factor can be decimal - [91b39ca] NSX-mh: fix default l2 gw connections - [884013c] Fixes Multiple External Networks issue with DVR - [d9c7888] Disable allowed_address_pair ip 0.0.0.0/0 ::/0 for ipset - [f11aa03] L3 agent should do report state before full sync at start - [44cb3c1] Hyper-V: Fixes Security Group Driver ICMPv6 rules - [53f238e] Fixes Hyper-V agent stateful security group rules - [ea63062] Fixes sync between Arista ML2 driver and EOS - [f434e7b] Process port IP requests before subnet requests - [cf8f5c9] Match order of iptables arguments to iptables-save - [11e4166] Persist DHCP leases to a local database - [1e6c2ed] ML2: Change port status only when it's bound to the host - [0325b98] Set IPset hash type to 'net' instead of 'ip' - [0d0675b] Fixes floating IP regression with multiple routers - [036133f] Router is not unscheduled when the last port is deleted - [9b18228] Remove locking from network and subnet delete op - [3017406] Fixes race condition and boosts the scheduling performance - [17850aa] Don't resync on DHCP agent setup failure - [59b9735] tests: confirm that _output_hosts_file does not log too often - [6d3d622] Ensure metadata network works with DVR - [aafe03f] Defer creation of router JSON in get_routers RPC - [4a69a64] Remove double queries in l3 DB get methods - [3fbb39c] Set loading strategy to joined for Routerport/Port - [fc0ae03] VMware NSX: Fix DVR operations - [96d472d] Return from check_ports_exist_on_l3agent if no subnet found - [6f6d861] Missing entry points for cisco apic topology agents - [1dcb072] Fixes Hyper-V agent port disconnect issue - [6687864] Fixes Hyper-V 2008 R2 agent VLAN Settings issue * d/neutron-plugin-cisco.install: Install neutron-cisco-apic-host-agent and neutron-cisco-apic-service-agent. . neutron (1:2014.2.3-0ubuntu1) utopic; urgency=medium . * Resynchronize with stable/juno (dbeaa70) (LP: #1443429): - [fe59efd] Don't eagerly load ranges from IPAllocationPool - [9e01647] lb-agent: use 'replace' instead of 'add' with 'bridge fdb' - [70786c6] Refactor logging in loop to only log debug messages once - [ddbad01] Deal with PEP-0476 certificate chaining checking - [3abee3b] ofagent: Fix port_dead - [48017f2] CSCO:Tenants not to access unshared n/w profiles - [61a5506] Use ryu.cfg.CONF for options from Ryu - [d329c22] attributes: Additional IP address validation - [5cb7a20] Default route missing for IPv6 subnets in HA Router - [7b0869b] Make del_fdb_flow() idempotent - [ff50c30] Hyper-V: Fixes security groups issue - [bd5f47c] Use DEVICE_OWNER_DVR_INTERFACE in NSX-mh plugin - [4856743] Make listing security groups faster - [e4aa290] Improve exception handling in _process_router_update() - [7ae879d] Correctly mock-out 'ip route...' calls in IPv6 test - [792aa82] Use HTTP BASIC AUTH exclusively (no longer use JSESSIONID) - [1fa38eb] Search in /sys/class/net for network devices - [c136f4f] Catch PortNotFound and SubnetNotFound during network_delete - [a52f19f] Setup br-tun in secure fail mode to avoid broadcast storms - [e22975a] Make sure we don't introduce oslo_* imports during backports - [a80999e] Configure IPv6 LLADDR only on master L3 HA instance - [99c6796] SIGHUP keepalived if L3 agent restarts - [edf0aab] Fix IPv6 RA security group rule for DVR - [9bb7eb5] Don't crash when adding duplicate gre allocation - [ed799e3] Pass '--dhcp-authoritative' option to dnsmasq - [41bfc2f] Fix extra-dhcp-opt on stateless dhcpv6 subnet - [7cd3d0c] Decrease rpc timeout after agent receives SIGTERM - [496d7a8] Fix floating-ips in error state in dvr mode - [6e9c760] Make prevent_l3_port_deletion handle missing port - [a861b88] Ignore 404 error and lower a warning log to info . neutron (1:2014.2.2-0ubuntu1) utopic; urgency=medium . [ Corey Bryant ] * Resynchronize with stable/juno (615e2d6) (LP: #1418695): - [3f73028] Configures RADVD to send managed flag in RA for DHCP_STATEFUL - [57bbce1] Arista L3 Ops is success if it is successful on one peer - [c1e2941] Fixes blocking of VRF config in Arista L3 Plugin - [81f1a7b] Do not duplicate message consumers - [fbabf07] If router is HA, get current_cidrs from keepalived object - [3332d4f] Fix AttributeError during startup of ovs agent in DVR mode - [755f2ad] Fix IP allocation for multiple slaac subnets - [e27f00d] Fix IPv6 Subnet Slaac Check - [88b73e6] Catch StaleDataError in update_device_down - [6d9dd88] Speed up initial L3 full sync time - [dbc630a] Make L3 HA VIPs ordering consistent in keepalived.conf - [82bf4af] Specify prefix length for IPv6 subnets - [42630f9] Fix for KeyError: 'gw_port_host' on l3_agent - [7c82512] NSX: synchronize floating IP operations - [5531d6d] NSX: Remove logic for creating chained logical switches - [b80a68e] [apic ml2] Bind ports regardless of the owner - [175e869] Reset policies after RESOURCE_ATTRIBUTE_MAP is populated - [66a91dd] Use stop() method on MessageHandlingServer - [097607a] Issue warning when running DHCP agent with dnsmasq < 2.67 - [560ef81] Fix neutron hang for IPv6 allocation pool update - [f979dd6] Fix for FIPs duplicated across hosts for DVR - [327e325] ipv6: set OtherConfig flag for DHCPv6 stateless subnets - [6c490a9] radvd: pass -m syslog to avoid thread lock for radvd 2.0+ - [a89ae1b] Eventlet green threads not released back to pool - [c6ef4e8] return the dict of port when no sec-group involved - [ab8f277] Moves the HA resource creations outside of transaction - [b776d19] Delete FIP namespace when last VM is deleted - [81ecf5b] Fix race condition on processing DVR floating IPs - [b297604] Fix a race condition adding a security group rule - [2f97180] Auto allocate gateway_ip even for SLAAC subnets - [6068320] Fix enable_metadata_network flag - [c96217a] Teach DHCP Agent about DVR router interfaces - [615e2d6] BSN: Optimistic locking strategy for consistency * d/control: Bump minimum python-eventlet to get socket_timeout support. (LP: #1419117). . neutron (1:2014.2.1-0ubuntu1) utopic; urgency=medium . [ Corey Bryant ] * Resynchronize with stable/juno (330ca81) (LP: #1398952): - [209160b] Fix hostname validation for nameservers - [d7ee2ff] Alter execute_alembic_command() to not assume all commands - [3e1d3a7] Prevent an iteration through ports on IPv6 slaac - [93f2536] Fix handling of CIDR in allowed address pairs - [8b5c08b] Fix metadata proxy start problem for v6-v4 network - [c00b4b3] Convert all incoming protocol numbers to string - [56b0029] linuxbridge-agent: make vxlan unicast check more efficent - [63b4337] Subnet delete for IPv6 SLAAC should not require prior port disassoc - [d09ba29] Fix context.elevated - [467a449] Drop and recreate FK if adding new PK to routerl3bindings - [87311b0] BSN: include missing data in floating IP call - [ad6fefc] Fix hostname regex pattern - [ba647ca] BSN: Set inconsistency record on delete failure - [c7954ab] fix event_send for re-assign floating ip - [b0d3e74] Fix KeyError in dhcp_rpc when plugin.port_update raise exception - [4e7b97e] rootwrap config files reference deleted quantum binaries - [d343288] Remove openvswitch core plugin entry point - [033e141] Fix L3 HA network creation to allow user to create router - [fe7c233] Stop ignoring 400 errors returned by ODL - [6efe68b] Allow to add router interface to IPv6 SLAAC network - [0877891] Set vif_details to reflect enable_security_group - [ee9c51d] Fix sleep function call - [96f9e7b] Batch ports from security groups RPC handler - [0be0dab] Big Switch: Fix SSL version on get_server_cert - [8575fe9] Create DHCP port for IPv6 subnet - [e51d647] NSX: allow multiple networks with same vlan on different phy_net - [a575cb7] _update_router_db: don't hold open transactions - [dd57281] Big Switch: Switch to TLSv1 in server manager - [560f8f8] Cisco N1kv: Fix update network profile for add tenants - [c5ae9dd] Only fetch port_id from SG binding table - [25c8280] Optimize query in _select_dhcp_ips_for_network_ids - [c14b58b] Improve performance of security group DB query - [f9f694f] Reduce security group db calls to neutron server - [72ef7b3] Cisco N1kv: Remove vmnetwork delete REST call on last port delete - [11f480e] Big Switch: Don't clear hash before sync - [4a84be5] Race for l2pop when ports go up/down on same host - [330ca81] Use EUI64 for IPv6 SLAAC when subnet is specified . neutron (1:2014.2-0ubuntu1) utopic; urgency=medium . * New upstream release. . neutron (1:2014.2~rc3-0ubuntu1) utopic; urgency=medium . [ Corey Bryant ] * New upstream release candidate. . neutron (1:2014.2~rc2-0ubuntu1) utopic; urgency=medium . * New upstream release candidate: - d/p/*: Refresh. * Fixup optimized iptables management by l2 daemons (LP: #1379779): - d/neutron-common.install: Install ipset-firewall.filters to support use of ipset to optimize firewall rulebase management. - d/control: Add ipset to Depends of neutron-common. * d/watch: Only match versions starting with digits. . neutron (1:2014.2~rc1-0ubuntu1) utopic; urgency=medium . * New upstream release candidate: - d/p/*: Refreshed. - d/control: Add python-requests-mock to BD's. - d/control: Align versioned requirements with upstream. * Transition linuxbridge and openvswitch plugin users to modular layer 2 plugin (LP: #1323729): - d/control: Mark removed plugin packages as transitional, depend on neutron-plugin-ml2, mark oldlibs/extra. - d/neutron-plugin-{linuxbridge,openvswitch}.install: Drop. - d/control: Depend on neutron-plugin-ml2 for linuxbridge agent package. - d/neutron-plugin-linuxbridge-agent.upstart: Use ml2 plugin configuration files. . neutron (1:2014.2~b3-0ubuntu4) utopic; urgency=medium . * d/control: Add radvd to neutron-l3-agent Depends to support IPv6 subnet configurations. * d/control: Add keepalived to neutron-l3-agent Depends to support HA router configurations (LP: #1371137). * d/control,neutron-plugin-opencontrail.install: Add plugin package for OpenContrail. * d/control,neutron-plugin-nuage.install: Add plugin package for Nuage. . neutron (1:2014.2~b3-0ubuntu3) utopic; urgency=medium . * d/control: Align versioned dependencies to b3 release, wrap-and-sort. * d/rules: Re-enable test suite. * d/rules: Enable auto-configuration of test concurrency. * d/p/*: Refresh. . neutron (1:2014.2~b3-0ubuntu2) utopic; urgency=medium . * debian/control: Fix typo in depdencies. . neutron (1:2014.2~b3-0ubuntu1) utopic; urgency=medium . * New upstream release. * debian/control: - Dropped pep8, python-amqplib, python-configobj, python-lxml, python-mox, python-psutil, python-pyudev, and python-simplejson - Added python-keystonestone. - Bumped version depdenendices for alembic, python-anyjson, python-cliff, python-fixtures, python-keystoneclient, python-mock, python-novaclient, python-oslo.config, python-pbr, python-requests, python-stevedore, and testrepository, - Added version depdenencies for python-babel, python-hacking, python-httplib2, python-iso8601, python-oslo.messaging, python-oslo.db, python-six, python-sqlalchemy, python-webob, and python-webtest, * debian/neutron-plugin-sriov-agent: Add mellanox SRIOV agent. * debian/patches/disable-udev-tests.patch: Updated. * debian/rules: Temporarily disable tests. . neutron (1:2014.2~b2-0ubuntu1) utopic; urgency=medium . * New upstream release. * debian/patches/fix-neutron-configuration.patch: Refreshed * debian/control: - Removed python-d2to1 build dependency. - Add python-hacking build dependency. - Add python-oslo.messaging as a build dependency. - Add python-oslo.db as a build dependency. . neutron (1:2014.2~b1-0ubuntu3) utopic; urgency=medium . * SECURITY UPDATE: specify /etc/neutron/rootwrap.conf for use with nova-rootwrap - CVE-2013-1068 (LP: #1185019) . neutron (1:2014.2~b1-0ubuntu2) utopic; urgency=medium . * debian/tests/neutron-daemons: Dont test neutron-lbaas since it needs to be configured properly in order to run the tests. (LP: #1240712) . neutron (1:2014.2~b1-0ubuntu1) utopic; urgency=medium . [ Chuck Short ] * debian/control: Open up juno release * debian/patches/fix-quantum-configuration.patch: Refreshed * debian/patches/disable-udev-tests.patch: Refreshed * debian/patches/disable-failing-metaplugin-tests.patch: Dropped * debian/patches/skip-lb-test.patch: Dropped * debian/patches/skip-ipv6-tests.patch: Dropped * debian/control: Add pep8 as a dependency. * debian/patches/use-concurrency.patch: Dropped * debian/neutron-common.dirs: Add lock directory. * debian/neutron-plugin-vmware.install: Dropped neutron-check-nvp-config. * debian/rules: Remove last bits of quantum. * debian/neutron-common.install: Add neutron-sanity-check. . [ Adrien Cunin ] * Renamed patch debian/patches/fix-{quantum,neutron}-configuration.patch * Removed references to Quantum in debian/cron.d/*'s comments * Removed debian/NEWS as it was only mentioning the now finished quantum/neutron name transition Checksums-Sha1: 01d7a7ede8b5f493e368a28f7c922cce74bb42ea 6168 neutron_2014.2.4-0ubuntu1~cloud1~ubuntu14.04.1~ppa201511231702.dsc 99d1eec34f2cef0fc3e6b4dee4361def9a630508 2093149 neutron_2014.2.4.orig.tar.gz 7746ba5b159d237d96ce2aada93dc1ffa3d462a4 24484 neutron_2014.2.4-0ubuntu1~cloud1~ubuntu14.04.1~ppa201511231702.debian.tar.xz Checksums-Sha256: 767e8362a8c8a9a826b9f8b963166fef2c7962586ff79552c50c6b2a315dc154 6168 neutron_2014.2.4-0ubuntu1~cloud1~ubuntu14.04.1~ppa201511231702.dsc 533ab31462d34f9a4eeb70e00036d5fb2c06c6cc955080aa1ffa118859029ce0 2093149 neutron_2014.2.4.orig.tar.gz 80b52b2553f9aaa6529cbaa01d906d681ad70b30314c4947e5f16f7d62e98c6e 24484 neutron_2014.2.4-0ubuntu1~cloud1~ubuntu14.04.1~ppa201511231702.debian.tar.xz Files: f37029abe8d5f9949f445f0496c20e9d 6168 net optional neutron_2014.2.4-0ubuntu1~cloud1~ubuntu14.04.1~ppa201511231702.dsc ddbdfd639724f48dbff502b2fe270dc7 2093149 net optional neutron_2014.2.4.orig.tar.gz 035c12cc74b5cc571e9e583b5971a438 24484 net optional neutron_2014.2.4-0ubuntu1~cloud1~ubuntu14.04.1~ppa201511231702.debian.tar.xz Original-Maintainer: Chuck Short