ELBA-2024-12598

ELBA-2024-12598 - iproute bug fix update

Type:	BUG
Severity:	NA
Release Date:	2024-08-26

Description

[6.8.0-2.el8]
- Rebuild on OL8.10 [Orabug: 35879152]

[6.8.0-1.el8]
- Updates to iproute-6.8.0-1.el8 for 8.9

[6.7.0-1.el8]
- New version 6.7.0 (Andrea Claudi) [RHEL-22438]

[6.2.0-5.el8]
- Bump version number (wrong exception build)

[6.2.0-4.el8]
- ip vrf: make ipvrf_exec SELinux-aware (Andrea Claudi) [1780023]
- lib: add SELinux include and stub functions (Andrea Claudi) [1780023]
- ss: make SELinux stub functions conformant to API definitions (Andrea Claudi) [1780023]
- ss: make is_selinux_enabled stub work like in SELinux (Andrea Claudi) [1780023]

[6.2.0-3.el8]
- tc: add missing separator (Andrea Claudi)

[6.2.0-2.el8]
- macvlan: Add bclim parameter (Andrea Claudi) [2188134]
- Update kernel headers (Andrea Claudi) [2188134]

[6.2.0-1.el8]
- New version 6.2.0 (Andrea Claudi) [RHEL-424]

[5.18.0-1.el8]
- New version 5.18.0 [2074607]

[5.15.0-4.el8]
- vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827]
- vdpa: Support reading device features (Andrea Claudi) [2056827]
- vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827]
- vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827]
- vdpa: Remove unsupported command line option (Andrea Claudi) [2056827]
- uapi: update vdpa.h (Andrea Claudi) [2056827]
- Update kernel headers and import virtio_net (Andrea Claudi) [2056827]

[5.15.0-3.el8]
- tc: u32: add json support in print_raw, print_ipv4, print_ipv6 (Andrea Claudi) [1989591]
- tc: u32: add support for json output (Andrea Claudi) [1989591]

[5.15.0-2.el8]
- vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2036880]
- vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2036880]
- vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2036880]
- vdpa: align uapi headers (Andrea Claudi) [2036880]

[5.15.0-1.el8]
- New version 5.15.0 (Andrea Claudi) [2016061]

[[5.12.0-4.el8]]
- lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists (Andrea Claudi) [1995082]

[[5.12.0-3.el8]]
- tc: htb: improve burst error messages (Andrea Claudi) [1910745]
- tc: u32: Fix key folding in sample option (Andrea Claudi) [1979425]
- police: Fix normal output back to what it was (Andrea Claudi) [1981393]
- police: Add support for json output (Andrea Claudi) [1981393]
- police: add support for packet-per-second rate limiting (Andrea Claudi) [1981393]
- Update kernel headers (Andrea Claudi) [1981393]
- mptcp: add support for port based endpoint (Andrea Claudi) [1984733]

[[5.12.0-2.el8]]
- add build and run-time dependencies on libbpf (Andrea Claudi) [1990402]

[[5.12.0-1.el8]]
- tc: f_flower: Add missing ct_state flags to usage description (Andrea Claudi) [1957243]
- tc: f_flower: Add option to match on related ct state (Andrea Claudi) [1957243]

[[5.12.0-0.el8]]
- New version 5.12.0 [1939382]

[[5.9.0-4.el8]]
- iplink_bareudp: cleanup help message and man page (Andrea Claudi) [1912412]

[[5.9.0-3.el8]]
- iproute: force rtm_dst_len to 32/128 (Andrea Claudi) [1852038]

[[5.9.0-2.el8]]
- tc: flower: fix json output with mpls lse (Andrea Claudi) [1885770]
- tc-mpls: fix manpage example and help message string (Andrea Claudi) [1885770]
- tc-vlan: fix help and error message strings (Andrea Claudi) [1885770]
- m_mpls: test the 'mac_push' action after 'modify' (Andrea Claudi) [1885770]
- m_mpls: add mac_push action (Andrea Claudi) [1885770]
- m_vlan: add pop_eth and push_eth actions (Andrea Claudi) [1885770]
- Update kernel headers (Andrea Claudi) [1885770]

[[5.9.0-1.el8]]
- Rebase iproute to v5.9.0 [1896011]

[[5.3.0-5.el8]]
- man: tc-ct.8: Add manual page for ct tc action (Andrea Claudi) [1844637]
- tc: flower: Add matching on conntrack info (Andrea Claudi) [1844637]
- tc: Introduce tc ct action (Andrea Claudi) [1844637]
- tc: add NLA_F_NESTED flag to all actions options nested block (Andrea Claudi) [1844637]
- Import tc_act/tc_ct.h uapi file (Andrea Claudi) [1844637]
- ss: allow dumping kTLS info (Andrea Claudi) [1812207]
- devlink: Add health error recovery status monitoring (Andrea Claudi) [1821039]

[[5.3.0-4.el8]]
- tc: f_flower: add options support for erspan (Andrea Claudi) [1830485]
- tc: f_flower: add options support for vxlan (Andrea Claudi) [1830485]
- tc: m_tunnel_key: add options support for erpsan (Andrea Claudi) [1830485]
- tc: m_tunnel_key: add options support for vxlan (Andrea Claudi) [1830485]
- iproute_lwtunnel: add options support for erspan metadata (Andrea Claudi) [1830485]
- iproute_lwtunnel: add options support for vxlan metadata (Andrea Claudi) [1830485]
- iproute_lwtunnel: add options support for geneve metadata (Andrea Claudi) [1830485]
- Update kernel headers (Andrea Claudi) [1830485]
- man: ip.8: add reference to mptcp man-page (Andrea Claudi) [1812207]
- man: mptcp man page (Andrea Claudi) [1812207]
- ss: allow dumping MPTCP subflow information (Andrea Claudi) [1812207]
- Update kernel headers (Andrea Claudi) [1812207]
- Update kernel headers (Andrea Claudi) [1812207]
- add support for mptcp netlink interface (Andrea Claudi) [1812207]
- Update kernel headers and import mptcp.h (Andrea Claudi) [1812207]
- ip: xfrm: add espintcp encapsulation (Andrea Claudi) [1844045]
- Update kernel headers and import udp.h (Andrea Claudi) [1844045]

[[5.3.0-3.el8]]
- xfrm: also check for ipv6 state in xfrm_state_keep (Andrea Claudi) [1828033]
- man: bridge.8: fix bridge link show description (Andrea Claudi) [1817571]
- ip: fix ip route show json output for multipath nexthops (Andrea Claudi) [1738633]
- ip link: xstats: fix TX IGMP reports string (Andrea Claudi) [1796041]
- nstat: print useful error messages in abort() cases (Andrea Claudi) [1824896]

[[5.3.0-2.el8]]
- man: ip.8: Add missing vrf subcommand description (Andrea Claudi) [1780010]
- xfrm: not try to delete ipcomp states when using deleteall (Andrea Claudi) [1808634]
- ip-xfrm: Fix help messages (Andrea Claudi) [1796045]
- man: rdma.8: Add missing resource subcommand description (Andrea Claudi) [1786576]
- man: rdma-statistic: Add filter description (Andrea Claudi) [1786565]
- tc: implement support for action flags (Andrea Claudi) [1770671]
- Update kernel headers (Andrea Claudi) [1770671]
- Update kernel headers (Andrea Claudi) [1770671]

[[5.3.0-1.el8]]
- New version 5.3.0 [1752857]

[[4.18.0-15.el8]]
- netns: make netns_{save,restore} static (Andrea Claudi) [1719759]
- ip vrf: use hook to change VRF in the child (Andrea Claudi) [1719759]
- netns: switch netns in the child when executing commands (Andrea Claudi) [1719759]
- m_mirred: don't bail if the control action is missing (Andrea Claudi) [1711760]
- tc: introduce support for chain templates (Andrea Claudi) [1710291]
- ip: reset netns after each command in batch mode (Andrea Claudi) [1671016]

[[4.18.0-14.el8]]
- ss: Review ssfilter (Andrea Claudi) [1698401]

[[4.18.0-13.el8]]
- ip-xfrm: Respect family in deleteall and list commands (Andrea Claudi) [1656717]
- Update kernel headers (Andrea Claudi) [1716361]
- uapi: update bpf header (Andrea Claudi) [1716361]
- uapi: update headers to 4.20-rc1 (Andrea Claudi) [1716361]
- bpf: add btf func and func_proto kind support (Andrea Claudi) [1716361]
- lib/bpf: fix build warning if no elf (Andrea Claudi) [1716361]
- bpf: initialise map symbol before retrieving and comparing its type (Andrea Claudi) [1716361]
- Include bsd/string.h only in include/utils.h (Andrea Claudi) [1716361]
- Use libbsd for strlcpy if available (Andrea Claudi) [1716361]
- bpf: check map symbol type properly with newer llvm compiler (Andrea Claudi) [1716361]
- bpf: implement btf handling and map annotation (Andrea Claudi) [1716361]
- bpf: implement bpf to bpf calls support (Andrea Claudi) [1716361]
- bpf: remove strict dependency on af_alg (Andrea Claudi) [1716361]
- bpf: move bpf_elf_map fixup notification under verbose (Andrea Claudi) [1716361]
- iplink: add support for reporting multiple XDP programs (Andrea Claudi) [1716361]
- rdma: Document IB device renaming option (Andrea Claudi) [1663228]
- rdma: Add an option to rename IB device interface (Andrea Claudi) [1663228]
- rdma: Introduce command execution helper with required device name (Andrea Claudi) [1663228]
- rdma: Update kernel include file to support IB device renaming (Andrea Claudi) [1663228]
- libnetlink: Convert GETADDR dumps to use rtnl_addrdump_req (Andrea Claudi) [1716772]

[[4.18.0-12.el8]]
- devlink: Add param command support (Andrea Claudi) [1663199]
- rdma: Fix representation of PortInfo CapabilityMask (Andrea Claudi) [1664694]
- uapi: update ib_verbs (Andrea Claudi) [1664694]
- tc: flower: Add support for QinQ (Andrea Claudi) [1615928]
- ip rule: Add ipproto and port range to filter list (Andrea Claudi) [1678111]

[[4.18.0-11.el8]]
- tc: m_tunnel_key: Add tunnel option support to act_tunnel_key (Phil Sutter) [1654761]
- tc: f_flower: add geneve option match support to flower (Phil Sutter) [1654761]
- l2tp: Fix printing of cookie and peer_cookie values (Phil Sutter) [1643805]

[[4.18.0-10.el8]]
- iplink: fix incorrect any address handling for ip tunnels (Phil Sutter) [1626304]

[[4.18.0-9.el8]]
- man: rdma: Add reference to rdma-resource.8 (Phil Sutter) [1610334]

[[4.18.0-8.el8]]
- Bump release to run fresh CI tests.

[[4.18.0-7.el8]]
- ip-route: Fix nexthop encap parsing (Phil Sutter) [1625358]
- man: ip-route.8: Document nexthop limit (Phil Sutter) [1625358]

[[4.18.0-6.el8]]
- Update kernel headers (Phil Sutter) [1637440]
- tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Phil Sutter) [1637440]
- tc: Remove pointless assignments in batch() (Phil Sutter) [1602555]
- tipc: Drop unused variable 'genl' (Phil Sutter) [1602555]
- ip-route: Fix parse_encap_seg6() srh parsing (Phil Sutter) [1602555]
- rdma: Don't pass garbage to rd_check_is_filtered() (Phil Sutter) [1602555]
- ip-route: Fix for memleak in error path (Phil Sutter) [1602555]
- rdma: Fix for ineffective check in add_filter() (Phil Sutter) [1602555]
- devlink: Fix error reporting in cmd_resource_set() (Phil Sutter) [1602555]
- libnetlink: fix use-after-free of message buf (Phil Sutter) [1602555]
- libnetlink: don't return error on success (Phil Sutter) [1602555]
- libnetlink: fix leak and using unused memory on error (Phil Sutter) [1602555]
- tc: htb: Print default value in hex (Phil Sutter) [1641053]

[[4.18.0-5.el8]]
- utils: fix get_rtnl_link_stats_rta stats parsing (Phil Sutter) [1626306]
- uapi: add snmp header file (Phil Sutter) [1626306]
- macsec: fix off-by-one when parsing attributes (Phil Sutter) [1628428]
- json: make 0xhex handle u64 (Phil Sutter) [1628428]

[[4.18.0-4.el8]]
- iplink_vxlan: take into account preferred_family creating vxlan device (Phil Sutter) [1626321]
- ip-addrlabel: Fix printing of label value (Phil Sutter) [1639412]
- bridge: fdb: Fix for missing keywords in non-JSON output (Phil Sutter) [1636532]

[[4.18.0-3.el8]]
- lib: introduce print_nl (Phil Sutter) [1625500]

[[4.18.0-2.el8]]
- bridge/mdb: fix missing new line when show bridge mdb (Phil Sutter) [1625500]
- ip-route: Fix segfault with many nexthops (Phil Sutter) [1625358]
- Update kernel headers (Phil Sutter) [1615915]
- tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1615915]
- tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1615915]
- iprule: Fix destination prefix output (Phil Sutter) [1623503]
- ip: Add missing -M flag to help text (Phil Sutter) [1612704]
- man: ss.8: Describe --events option (Phil Sutter) [1612704]
- rtmon: List options in help text (Phil Sutter) [1612704]
- man: rtacct.8: Fix nstat options (Phil Sutter) [1612704]
- man: ifstat.8: Document --json and --pretty options (Phil Sutter) [1612704]
- genl: Fix help text (Phil Sutter) [1612704]
- man: devlink.8: Document -verbose option (Phil Sutter) [1612704]
- devlink: trivial: Make help text consistent (Phil Sutter) [1612704]
- bridge: trivial: Make help text consistent (Phil Sutter) [1612704]
- man: bridge.8: Document -oneline option (Phil Sutter) [1612704]

* Tue Aug 14 2018 Phil Sutter - 4.18.0-1
- New version 4.18.0

[[4.17.0-1.el8]]
- rdma: print driver resource attributes (Phil Sutter) [1610334]
- rdma: update rdma_netlink.h to get new driver attributes (Phil Sutter) [1610334]
- rdma: Print net device name and index for RDMA device (Phil Sutter) [1610334]
- devlink: CTRL_ATTR_FAMILY_ID is a u16 (Phil Sutter) [1589317]
- tc: Do not use addattr_nest_compat on mqprio and netem (Phil Sutter) [1589317]
- ipaddress: Fix and make consistent label match handling (Phil Sutter) [1589317]
- rt_dsfield: Ship deprecated values for compatibility (Phil Sutter) [1595683]
- New version 4.17.0 including upstream-suggested fixes (Phil Sutter) [1589317]

[4.15.0-1]
- New version 4.15.0

[4.14.1-6]
- Use LDFLAGS defaults from redhat-rpm-config

[4.14.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.14.1-4]
- Add missing patch files.

[4.14.1-3]
- Add upstream suggested backports.
- Make use of %autosetup macro.

[4.14.1-2]
- Drop unused build dependencies

[4.14.1-1]
- New version 4.14.1

[4.13.0-1]
- New version 4.13.0

[4.12.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[4.12.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[4.12.0-1]
- New version 4.12.0

[4.11.0-1]
- Add virtual capability to tc subpackage so it's easier found
- New version 4.11.0

[4.10.0-3]
- don't build docs for module builds to limit dependencies

[4.10.0-2]
- Add two fixes to 4.10.0 release from upstream.

[4.10.0-1]
- Ship new header iproute2/bpf_elf.h
- Document content of remaining docs fixup patch in spec file
- Drop patches already applied upstream

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	iproute-6.8.0-2.el8_10.src.rpm	77f5274267cc9f74a7ec3f607b0cf4fc	-	ol8_aarch64_UEKR7
	iproute-6.8.0-2.el8_10.aarch64.rpm	bf23328f082a1068c2aa19374758b2ba	-	ol8_aarch64_UEKR7
	iproute-devel-6.8.0-2.el8_10.aarch64.rpm	00f912f8b64ddbe2bf34b65b8e3f7d70	-	ol8_aarch64_UEKR7
	iproute-doc-6.8.0-2.el8_10.aarch64.rpm	f2b9efc3f6509ccae02fe29a2e55b173	-	ol8_aarch64_UEKR7
	iproute-tc-6.8.0-2.el8_10.aarch64.rpm	db8aa8b5e5e7a89646a638b540554995	-	ol8_aarch64_UEKR7
Oracle Linux 8 (x86_64)	iproute-6.8.0-2.el8_10.src.rpm	77f5274267cc9f74a7ec3f607b0cf4fc	-	ol8_x86_64_UEKR7
	iproute-6.8.0-2.el8_10.x86_64.rpm	743559ffd89ca7a17f071ba17ed6bc26	-	ol8_x86_64_UEKR7
	iproute-devel-6.8.0-2.el8_10.x86_64.rpm	65a31595470f8d9485ccf6fea0894fdd	-	ol8_x86_64_UEKR7
	iproute-doc-6.8.0-2.el8_10.x86_64.rpm	d13efb9114ec6721553d3772c811bc60	-	ol8_x86_64_UEKR7
	iproute-tc-6.8.0-2.el8_10.x86_64.rpm	26b5a3f68c251e50eb3a4d4d251fc9b0	-	ol8_x86_64_UEKR7