linux/meta-virtualization.git/recipes-networking, branch master

cni: Add CVE_PRODUCT to align with NVD CPE

2026-04-21T02:35:12+00:00

`CVE_PRODUCT` has been set to `linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins` to align with the product naming defined in the NVD CPE database for `cni`. The NVD CPE database contains product variants for this project under: `cpe:2.3:a:linuxfoundation:container_network_interface` `cpe:2.3:a:linuxfoundation:cni_network_plugins` The NVD references for these CPEs confirm that they correspond to the source code used in our recipe. Signed-off-by: Himanshu Jadon Signed-off-by: Bruce Ashfield

ceph, libvirt, openvswitch: marked some CVEs as patched

2026-03-30T19:35:54+00:00

For ceph, libvirt and openvswitch, 9 CVEs were marked as "unpatched" whereas they have been patched long ago compared to the versions of the recipes, because the NVD database does not contain patched version for those CVEs. Reviewed-by: Enguerrand de Ribaucourt Reviewed-by: Erwann Roussy Signed-off-by: Youenn Le Jeune Signed-off-by: Bruce Ashfield

slip4netns: update to v1.3.3

2026-03-26T13:52:09+00:00

Bumping slirp4netns to version v1.3.3-6-g6be0d53, which comprises the following commits: b02e000 Revert "CI: temporarily disable release check for PRs" b0c346d CI: temporarily disable release check for PRs 3d01dce v1.3.3+dev 944fa94 v1.3.3 0422b01 CI: bump up deps 019cd5a bump libslirp to v4.9.1 bf1c767 CI: Enable actions/attest-build-provenance@v2 4523924 v1.3.2+dev 0f13345 v1.3.2 ead6f78 CI: update deps e859823 bump libslirp to v4.9.0 d1a900b v1.3.1+dev e5e368c v1.3.1 036c206 CI: bump libslirp to v4.8.0 Signed-off-by: Bruce Ashfield

passt: update to 2026_01_20.386b5f5

2026-03-26T13:45:09+00:00

Bumping passt to version 2026_01_20.386b5f5-48-gbc872d9, which comprises the following commits: bc872d9 treewide: Spell ASSERT() as assert() 451fb76 vu_common: Move iovec management into vu_collect() f5391ae vu_handle_tx: Pass actual remaining out_sg capacity to vu_queue_pop() b9d076d virtio: Pass iovec arrays as separate parameters to vu_queue_pop() 47e56fd pif: Remove unused PIF_NAMELEN b5e6ef4 doc: Fix formatting of (DEPRECATED) notes in man page 744d6df Makefile: Use $^ to avoid duplication in static checker rules 1b32bfe conf: Parse all forwarding options at the same time ea239bf conf: Don't defer handling of --dns option ee0e20e fwd: Always open /proc/net{tcp,tcp6,udp,udp6} in pasta mode d460ca3 fwd: Unify TCP and UDP forwarding tables bb2e4dd fwd: Split forwarding table from port scanning state d30e0b7 Fix misnamed field in struct ctx comments 4fa0076 fwd: Don't initialise unused port bitmaps d2438ef tcp: Remove stale description of port_to_tap field 0294fae conf, fwd: Make overall forwarding mode local to conf path 831e983 netlink: Allow NULL to be passed as addr parameter to nl_addr_get (again) 251e676 netlink: Return prefix length for IPv6 addresses in nl_addr_get() 045560c iov: Add iov_truncate() helper and use it in vu handlers 994bb76 tcp: Avoid comparison of expressions with different signedness in RTT_SET() ab77097 tcp: Avoid comparison of expressions with different signedness in tcp_timer_handler() 5766fe8 migrate: Rename v1 address functions to v2 for clarity 71a0d6c vu_common: Always set num_buffers in virtio-net header 685864d clang-tidy: Don't insist on #ifdef over #if defined() 9ee7805 fwd, pif: Replace with pif_sock_l4() with pif_listen() 7d0fe08 tcp: Use flow_foreach_of_type() in tcp_{keepalive,inactivity} adbf5c1 Add missing includes to headers d2f7c21 tcp: Send TCP keepalive segments after a period of tap-side inactivity a681e44 tcp: Extend tcp_send_flag() to send TCP keepalive segments 1820103 tcp: Re-introduce inactivity timeouts based on a clock algorithm e48ce41 tcp: Remove non-working activity timeout mechanism eb3babf tcp_vu, udp_vu: Fix comment headers for header length functions 66e5941 Fix build when HAS_GETRANDOM is undefined 8636c73 tcp_vu, udp_vu: Account for virtio net header in minimum frame size de5b694 tcp_vu: vu_pad() expects l2 length c320191 conf: Support CIDR notation for -a/--address option 02af38d virtio: Introduce VNET_HLEN macro for virtio net header length 812cdb8 tcp: Move tap header update out of tcp_fill_headers() bebafa7 udp: Split activity timeouts for UDP flows 036fb87 checksum: add VSX fast path for POWER8/POWER9 af7b81b migrate: Use forward table information to close() listening sockets 768baf4 tcp, tcp_splice: Check for failures of shutdown(2) 3581ded tcp: Eliminate FIN_TIMEOUT e992b14 tcp: Retransmit FINs like data segments e3f70c0 tcp_splice: Force TCP RST on abnormal close conditions cce94e9 tcp: Properly propagate tap-side RST to socket side 07390d1 doc: Add test program verifying socket RST behaviour 69ce8ee tcp: Add error checking for flow_epoll_set() in tcp_flow_migrate_target() 386b5f5 flow: Remove EPOLLFD_ID_INVALID 90287c2 tcp: Register fds with epoll at flow creation 0fbd7af tcp_splice: Register fds with epoll at flow creation cee7eb0 conf, pasta: Add --splice-only option 4a0d507 flow, fwd: Optimise forwarding rule lookup using epoll ref when possible fe37028 fwd, tcp, udp: Add forwarding rule to listening socket epoll references 01bcdb9 fwd: Remap ports based directly on forwarding rule f56a822 flow, fwd: Consult rules table when forwarding a new flow from socket a0af19f fwd: Generate auto-forward exclusions from socket fd tables 03a9c4b conf, fwd: Check forwarding table for conflicting rules acb7a30 tcp, udp: Remove old auto-forwarding socket arrays b223bec fwd, tcp, udp: Set up listening sockets based on forward table 0c611bc ip: Add ipproto_name() function da49557 fwd: Make space to store listening sockets in forward table e2633b9 conf, fwd: Record "auto" port forwards in forwarding table 9323ab9 conf: Accurately record ifname and address for outbound forwards bd52f61 conf, fwd: Keep a table of our port forwarding configuration 016e3d7 inany: Extend inany_ntop() to treat NULL as a fully unspecified address 81c97f6 hooks/pre-push: Use mandoc(1) to get HTML anchors to command-line options a6d92ca selinux: Enable open permissions on netns directory, operations on container_var_run_t 4296a59 igmp: Remove apparently unneeded suppression fa765d5 epoll_ctl: Move u64 variant first for safer initialisation 4af3d83 treewide: Fix more pointers which can be const a54274d tcp, udp: Make {tcp,udp}_listen() return socket fds d5fd945 tcp, udp, conf: Don't silently ignore listens on unsupported IP versions c0be730 flow: Introduce flow_epoll_set() to centralize epoll operations 23da651 tcp_splice: Refactor tcp_splice_conn_epoll_events() to per-side computation e0fdfcc udp_flow: Assign socket to flow inside udp_flow_sock() ab27852 udp_flow: remove unneeded epoll_ref indirection cce0470 tcp: cleanup timer creation 5614bdc tcp: remove timer update in tcp_epoll_ctl() faab79c apparmor: Upgrade ABI version to 4.0, explicitly enable user namespace creation 2be0e79 tcp: Fix rounding issue in check for approximating window to zero b973f4a treewide: Fix places where we incorrectly indented with spaces b98a2e8 tcp: Remove some no longer used includes 35f63d2 fwd: Minor cleanup to fwd_nat_from_splice() facc736 fwd: Remove now-unnecessary handling of unspecified oaddr from splice edac476 udp_vu: Discard datagrams when RX virtqueue is not usable 9ea9dde fwd, tcp, udp: Consolidate epoll refs for listening sockets 3b55ba8 epoll_ctl: Add missing description for flowside field of epoll_ref ad5670a tcp: Remove unused tcp_epoll_ref 9437fc2 test: Include sshd-auth in mbuto guest image ac77d0c test: Handle Operating System Command escapes in terminal output accc331 treewide: Don't rely on terminator records in ip[46].dns arrays 4a0c1a6 migrate: Don't use terminator element for versions[] array 0bd2e68 util: Be more defensive about buffer overruns in read_file() 2aa6323 apparmor: Allow reading TCP RTO sysctl parameters 2ba9fd5 tcp: Update EPOLL_TYPE_TCP_TIMER fd 6292845 udp: Rename udp_sock_init() to udp_listen() with small cleanups 0f4ba61 tcp: Combine tcp_sock_init_one() and tcp_sock_init() into tcp_listen() 75dcbc3 pasta: Warn, disable matching IP version if not supported, in local mode d2c5133 selinux: Enable read and watch permissions on netns directory as well b40f5cd tcp: Use less-than-MSS window on no queued data, or no data sent recently 35fa86a conf, fwd: Move initialisation of auto port scanning out of conf() 5be1a22 tcp: Remove extra space from TCP_INFO debug messages (trivial) 87f1a91 pasta: Clean up waiting pasta child on failures e6612fe treewide: Introduce passt_exit() helper d6c5b6e tcp: Suppress new instance of cppcheck bug 14191 d04c480 pif: Correctly set scope_id for guest-side link local addresses 696709d tcp: Correct timer expiry value in trace message c3f1ba7 tcp_splice, flow: Add socket to epoll set before connect(), drop assert e8b56a3 fedora: Fix build on Fedora 43, selinux_requires_min not available on Copr builders c93515c tcp: Skip redundant ACK on partial sendmsg() failure e0f1330 tcp: Send a duplicate ACK also on complete sendmsg() failure 2b5c906 tcp: Allow exceeding the available sending buffer size in window advertisements cf1925f tcp: Don't limit window to less-than-MSS values, use zero instead 9139e60 tcp: Acknowledge everything if it looks like bulk traffic, not interactive 28f413d tcp: Don't clear ACK_TO_TAP_DUE if we're advertising a zero-sized window 000601b tcp: Adaptive interval based on RTT for socket-side acknowledgement checks 920a479 tcp: Limit advertised window to available, not total sending buffer size f423e12 tcp: Change usage factor of sending buffer in tcp_get_sndbuf() to 75% 6305b6c tcp, util: Add function for scaling to linearly interpolated factor, use it 5d83844 iov: Fix coding style of basic (non-IOV_TAIL) parts 0cb8f90 tcp, udp: Pad batched frames for vhost-user modes to 60 bytes (802.3 minimum) 68b0a36 tcp, udp: Pad batched frames to 60 bytes (802.3 minimum) in non-vhost-user modes b9cd36f udp: Fix coding style for comment to enum udp_iov_idx e3e8af7 tcp: Fix coding style for comment to enum tcp_iov_parts 1e51971 tap: Pad non-batched frames to 802.3 minimum (60 bytes) if needed 822ce09 test: Update Makefile to avoid failing on missing images 4ddd59b conf: Separate local mode for each IP version, don't enable disabled IP version 834982c vu_common: Clarify prototype of vu_collect() 7c7be67 test: Expand tmux right status bar to fit pass/fail/skipped counter and time aa809d3 tcp: Enable SO_KEEPALIVE if we see keep-alive segments from container / guest 9e2e381 seccomp: Fix build and operation on 32-bit musl targets fdbb4ef fwd: Preserve non-standard loopback address when splice forwarding e3c4c41 tcp: Always populate oaddr field for socket initiated flows cec1ca8 util: Rename sock_l4_dualstack() to sock_l4_dualstack_any() 653705c tcp, udp: Bind outbound listening sockets by interface instead of address e77cbf0 tcp, udp: Remove fallback if creating dual stack socket fails e6f6eb2 util: Fix setting of IPV6_V6ONLY socket option 74e6f12 udp: Move udp_sock_init() special case to its caller c8d4683 udp: Unify some more inbound/outbound parts of udp_sock_init() 860d3b1 tcp: Merge tcp_ns_sock_init[46]() into tcp_sock_init_one() 3b8b834 util, flow, pif: Simplify sock_l4_sa() interface b0523f6 inany: Let length of sockaddr_inany be implicit from the family 484dcfa flow: Remove bogus @path field from flowside_sock_args f37db87 conf: More useful errors for kernels without SO_BINDTODEVICE 0ae7b8c util: Extend sock_probe_mem() to sock_probe_features() 10e850a util: Correct error message on SO_BINDTODEVICE failure 1a83487 tcp: Clamp the retry timeout 3dde0e0 tcp: Update data retransmission timeout 0e8df13 tcp: Resend SYN for inbound connections ffecfaf util: Introduce read_file() and read_file_integer() function 785214c tcp: Rename "retrans" to "retries" 2002c7d arp/ndp: don't send messages on uninitialized tap interface 391c15a test: Fix IPv6 address/prefix mismatch error 95ab87b spec: use %selinux_requires_min macro, drop overlapping dependencies be1583f fwd: Don't explicitly exclude reverse-direction TCP ports for UDP fd3fc8d fwd: Exclude ports based on prior mapping state bdbdf4e Revert "fwd: Update all port maps before applying exclusions" 2c6590d udp: Use IP_FREEBIND for flow sockets as well as listening sockets 75b8bb9 tcp: Properly remove sockets from epoll loop when connection is closed a36031a seccomp.sh: Quote tr character ranges to prevent glob expansion 1d16439 contrib/selinux: use regex instead of SELinux template f6b6118 tcp, udp: Don't exclude ports in {tcp,udp}_port_rebind() 81942a2 fwd: Update all port maps before applying exclusions 942bfdb fwd: Check forwarding mode in fwd_scan_ports_*() rather than caller 06c3dcc fwd: Share port scanning logic between init and timer cases 1754f61 fwd: Move port exclusion handling from procfs_scan_listen() to callers 1bc7d54 fwd: Consolidate scans (not rebinds) in fwd.c 260075b tcp, udp, fwd: Run all port scanning from a single timer 1f2c08b icmp: Remove vestiges of ICMP timer 57446ca passt: Move main event loop processing into passt_worker() aaa8f34 udp: Use epoll instance management for UDP flows ca93124 icmp: Use epoll instance management for ICMP flows dd5302d tcp, flow: Replace per-connection in_epoll flag with an epollid in flow_common 05972c7 util: Move epoll registration out of sock_l4_sa() 965ea66 epoll_ctl: Extract epoll operations 8bfa47a util: Simplify epoll_del() interface to take epollfd directly 3a9dbe0 icmp: let icmp use mac address from flowside structure ad72098 tap: change signature of function tap_push_l2h() 860a487 tcp: forward external source MAC address through tap interface 627d5f7 udp: forward external source MAC address through tap interface 5d35ac3 flow: add MAC address of LAN local remote hosts to flow 7917155 arp/ndp: send ARP announcement / unsolicited NA when neigbour entry added e456c02 arp/ndp: respond with true MAC address of LAN local remote hosts 45869d6 fwd: Add cache table for ARP/NDP contents 3c46901 netlink: add subscription on changes in NDP/ARP table 3b9c7f8 Add reverse Christmas tree to CONTRIBUTING.md 7bb150c fwd: Fix misspelling b2ccb6d test: Fix the escaping issue in memory/passt test 812a7c6 test: Update the threshold value for some perf tests 4fb4c31 tap: Update some function comments for accuracy 8a6def6 passt: Rename EPOLL_EVENTS to NUM_EPOLL_EVENTS 720cc0b Fix the wrong command in CONTRIBUTING.md 6d84c90 test: For missing static checkers, skip rather than failing tests 5149f34 test: Add some missing quoting in exeter runner 898cf50 test: Use ${} consistently in lib/exeter 5da0316 isolation: keep CAP_DAC_OVERRIDE initially 518d8c1 tcp: Clarify logic calculating how much guest data to ack a947839 tcp: On partial send (incomplete sendmsg()), request a retransmission right away b145441 tcp: Don't consider FIN flags with mismatching sequence 8efa80b tcp: Completely ignore data segment in CLOSE-WAIT state, log a message b3217aa tcp: Fix ACK sequence on FIN to tap 2a16cdf test: Add linting of Python test scripts 81fd66a test: Don't delete exetool on make clean 2274c3a cppcheck: Suppress variable scope warnings in dhcpv6() ee9b236 cppcheck: Suppress a buggy cppcheck warning 065d199 cppcheck: Suppress the suppression of a suppression b4b3b08 clang-tidy: Suppress redundant expression warning 4d9c35b test: Update passt.mbuto and passt.mem.mbuto a96a962 netlink: Don't require address to be global, just not link local 7086781 test: Fix printf error when debug is enabled c54ef9e test: Update README.md f4729be test: Update mbuto profile to fix the symlink of /bin de28c20 test: Update lib/term for clearer output when DEBUG is enabled f07d7b0 test: fix 'make assets' failure as root e81c692 tap: Drop frames if no client connected 623dbf6 Add --stats option to display event statistics ad4aae7 netlink: Drop nexthop state flags from routes we duplicate 080f176 Add CONTRIBUTING.md c66be2c selinux: add missing file contexts for Podman fd1bcc3 selinux: add container_var_run_t type transition 6f23cb9 dhcp: Fix coding style violations in dhcp() function 1f22fde Improve clarity of comment e2920e3 Send an initial ARP and NDP request to resolve the guest IP address 142b3d8 Fix --no-icmp description and make it imply --no-ndp 07cb07d Introduce constant MAC_BROADCAST fc0affc Show debug message whenever we observe a new guest MAC address 6cbcccc tcp: Store the owner connections for flags frames cd2e886 Reduce tcp_buf_discard size 8d2f8c4 tcp: Don't send FIN segment to guest yet if we have pending unacknowledged data bde1847 tcp: Fast re-transmit if half-closed, make TAP_FIN_RCVD path consistent 660cd69 tcp: Cast operands of sequence comparison macros to uint32_t before using them 25f9354 tcp: Don't try to transmit right after the peer shrank the window to zero c62fb08 tcp: Fix closing logic for half-closed connections e86d480 tcp: Rewind sequence when guest shrinks window to zero 1d502be tcp: Factor sequence rewind for retransmissions into a new function 2e3d93b tcp: FIN flags have to be retransmitted as well d363fb7 test: Fix the download link for debian-11-generic-ppc64el image c10d8c9 tcp_vu: Pass virtqueue pointer to tcp_vu_sock_recv() ed18d4c udp_vu: Pass virtqueue pointer to udp_vu_sock_recv() 6239915 vhost-user: Fix VHOST_USER_GET_QUEUE_NUM to return number of queues f9ee749 Add missing explicit PSH assignment 83afb88 Fix typo in doc comment 00e3580 test: Explicit specify forwarding ports for pasta in log rotation tests 3c44ef8 test: Allow exeter & podman tests to be parallel executed with BATS ffe34d2 test: Convert build tests to exeter a58e60e test: Run static checkers as exeter tests a283ef4 test: Extend test scripts to allow running exeter tests. ca38be0 packet: Add support for multi-vector packets 3e43e1a packet: Refactor vhost-user memory region handling 1602aa2 packet: remove unused parameter from PACKET_POOL_DECL() 7ae35a9 packet: remove PACKET_POOL() and PACKET_POOL_P() 2eb845a ndp: use iov_tail rather than pool 76de6f5 icmp: use iov_tail rather than pool 42a108b dhcpv6: use iov_tail rather than pool 3a261fd dhcp: use iov_tail rather than pool c977d1f arp: use iov_tail rather than pool 7e25351 packet: rename packet_data() to packet_get() 9505908 tap: Convert tap6_handler() to iov_tail a26c608 tap: Convert tap4_handler() to iov_tail 20cd6d0 ip: Use iov_tail in ipv6_l4hdr() 84a4d3e dhcp: Convert to iov_tail feb3330 dhcpv6: Use iov_tail in dhcpv6_opt() c4cad31 dhcpv6: Convert to iov_tail 54f15c6 dhcpv6: Extract sending of NotOnLink status 1932832 dhcpv6: move offset initialization out of dhcpv6_opt() d2c33f4 tcp: Convert tcp_data_from_tap() to use iov_tail 87cc7ab tcp: Convert tcp_tap_handler() to use iov_tail d9604f0 udp: Convert to iov_tail e45bf13 icmp: Convert to iov_tail f8860bb ndp: Convert to iov_tail 1fc944c arp: Convert to iov_tail 6bada9a packet: Add packet_data() de469a3 packet: Use iov_tail with packet_add() 720d8fc tap: Use iov_tail with tap_add_packet() 70b9c0c iov: Update IOV_REMOVE_HEADER() and IOV_PEEK_HEADER() 066e6b1 iov: Introduce iov_tail_clone() and iov_drop_header(). ea3dd28 arp: Don't mix incoming and outgoing buffers eef5bb8 build: Fix errors of TCP_REPAIR_* undeclared b4fc6cd treewide: Flush pcap and log files, if used, before exiting 309eefd selinux: pasta accesses /etc/resolv.conf a878286 treewide: By default, don't quit source after migration, keep sockets open 79de81e test: Deal with /bin, /sbin unification in Fedora 3757ea3 style: Add parentheses to function names in comments 9e0423e style: Fix 'Return' comment style 0293c6f fedora: Hide restorecon(8) errors in post-transaction scriptlet 98da8a9 fedora: Add container-selinux as dependency for passt-selinux 754c6d7 flow, repair: Proper error handling for missing passt-repair helper on target a2088fe fedora: Depend on SELinux tools and policy version, drop circular dependency d21bcd9 fedora: Call %selinux_modules_* macros only once 081df67 conf: flush stdout before early exit bcb5596 passt-repair: Fix missing newlines in error messages 2c88349 Correct various function comment headers 515b5ee tap: Avoid bogus missingReturn cppcheck warning in tap_l2_max_len() e019323 fedora: Separately restore context for /run/user in %posttrans selinux 7aeda16 selinux: Transition to pasta_t in containers 3262c9b iov: Standardize function comment headers b915375 virtio: Correct and align comment headers 2fd0944 vhost_user: Correct and align function comment headers 2046976 codespell: Correct typos in comments and error message 4234ace test: Display count of skipped tests in status and summary 2d3d69c flow: Fix clang error (clang-analyzer-security.PointerSub) 0f7bf10 ndp: Fix Clang analyzer warning (clang-analyzer-security.PointerSub) a6b9832 virtio: Fix Clang warning (bugprone-sizeof-expression, cert-arr39-c) 570e7b4 dhcpv6: fix GCC error (unterminated-string-initialization) 8ec1341 flow: close socket fd on error 92d5d68 flow: fix wrong macro name in comments eea8a76 flow: fix podman issue #26073 587980c udp: Actually discard datagrams we can't forward f0021f9 fwd: fix doc typo 93394f4 selinux: Add getattr to class udp_socket 11be695 flow: fix podman issue #25959 6a96cd9 util: Fix typo, ASSSERTION -> ASSERTION ea0a124 passt-repair: Hide bogus gcc warning from -Og aa1cc89 conf: allow --fd 0 436afc3 udp: Translate offender addresses for ICMP messages 08e617e udp: Rework offender address handling in udp_sock_recverr() 4668e91 treewide: Improve robustness against sockaddrs of unexpected family 9128f6e fwd: Split out helpers for port-independent NAT 2340bbf udp: Propagate errors on listening and brand new sockets cfc0ee1 udp: Minor re-organisation of udp_sock_recverr() f107a86 udp: Add udp_pktinfo() helper 0498457 udp: Deal with errors as we go in udp_sock_fwd() 3f99558 udp: Pass socket & flow information direction to error handling functions 1bb8145 udp: Be quieter about errors on UDP receive baf049f udp: Fix breakage of UDP error handling by PKTINFO support 5024908 conf: Honour --dns-forward for local resolver even with --no-map-gw bbff365 conf: Split add_dns_resolv() into separate IPv4 and IPv6 versions 59cc89f udp, udp_flow: Track our specific address on socket interfaces 695c623 inany: Improve ASSERT message for bad socket family f4b0dd8 udp: Use PKTINFO cmsgs to get destination address for received datagrams 6693fa1 tcp_splice: Don't clobber errno before checking for EAGAIN d3f33f3 tcp_splice: Don't double count bytes read on EINTR ffbef85 conf: Add missing return in conf_nat(), fix --map-guest-addr none 06ef64c udp_flow: Save 8 bytes in struct udp_flow on 64-bit architectures 9725e79 udp_flow: Don't discard packets that arrive between bind() and connect() 9eb5406 udp: Fold udp_splice_prepare and udp_splice_send into udp_sock_to_sock bd6a41e udp: Rework udp_listen_sock_data() into udp_sock_fwd() 159beef udp_flow: Take pif and port as explicit parameters to udp_flow_from_sock() fd844a9 udp: Move UDP_MAX_FRAMES to udp.c fc6ee68 udp: Merge vhost-user and "buf" listening socket paths 0304dd9 udp: Split spliced forwarding path from udp_buf_reply_sock_data() 5221e17 udp: Parameterize number of datagrams handled by udp_*_reply_sock_data() 3a0881d udp: Don't bother to batch datagrams from "listening" socket 84ab130 udp: Polish udp_vu_sock_info() and remove from vu specific code 1d7bbb1 udp: Make udp_sock_recv() take max number of frames as a parameter d74b5a7 udp: Use connect()ed sockets for initiating side a7775e9 udp: support traceroute in direction tap-socket 06784d7 passt-repair: Ensure that read buffer is NULL-terminated 684870a udp: Correct some seccomp filter annotations 76e554d udp: Simplify updates to UDP flow timestamp 8aa2d90 udp: Remove redundant udp_at_sidx() call in udp_tap_handler() 3d41e4d passt-repair: Correct off-by-one error verifying name dec3d73 migrate, tcp: bind() migrated sockets in repair mode 6bfc60b platform requirements: Add test for address conflicts with TCP_REPAIR 8e32881 platform requirements: Add attributes to die() function 2ed2d59 platform requirements: Fix clang-tidy warning 3de5af6 udp: Improve name of UDP related ICMP sending functions 025a3c2 udp: Don't attempt to forward ICMP socket errors to other sockets 42a854a pasta, passt-repair: Support multiple events per read() in inotify handlers 65cca54 udp: correct source address for ICMP messages 664c588 build: normalize arm targets 77883fb udp: Add helper function for creating connected UDP socket 37d78c9 udp: Always hash socket facing flowsides f67c488 udp: Better handling of failure to forward from reply socket 269cf6a udp: Share more logic between vu and non-vu reply socket paths d924b7d udp_vu: Factor things out of udp_vu_reply_sock_data() loop 5a977c2 udp: Simplify checking of epoll event bits 89b203b udp: Common invocation of udp_sock_errs() for vhost-user and "buf" paths cf4d3f0 packet: Upgrade severity of most packet errors Signed-off-by: Bruce Ashfield

openvswitch: update to v3.7.0

2026-03-26T13:36:09+00:00

We refresh patches for context changes, and pick up the following commits: 0d4c78e15 github: Update all the actions to prepare for Node.js 24. c052c469b dpctl: Fix memory leak in ipf-get-status command. f86caea06 netdev-dpdk: Fix vhost_driver_flags data race in destruct. 71dae047d coverage: Fix data race when reading idx_count in coverage_read(). b5f36a6d6 packets: Validate ND option length in packet_set_nd(). 920eb244e ovs-router: Fix locking in ovs_router_rule_add(). dd4d9983a ovs-router: Fix --disable-system-route rules filter. cd7b495e2 tests: Make routing rules checks more resilient. a51e47506 github: Fix potential 32-bit package installations. a7cd823a1 python: Fix discarded const qualifier in json_to_python. 00b013a64 ovsdb: raft: Don't grant a pre-vote to a server that is behind. 95473a95e ovsdb-cluster.at: Test disruptive server with outdated log and term. f559623f9 netdev-linux: Fix IFLA_IF_NETNSID value. 0a88fdec2 Revert "python: Replace deprecated License with License-Expression (PEP 639).". 028e6268c Prepare for 3.7.1. bdb95cc19 Set release date for 3.7.0. c1eef6db4 ovs-router: Don't report internal route priority in json output. 8c6ebf895 bond: Fix next_rebalance offset calculation. f43bde3d5 rhel: Avoid warning about missing .la with Fedora spec. 37e41460e rhel: Remove kernel mentions from the Fedora spec. a47cf0e6b rhel: Don't ship network scripts on RHEL 9+ and Fedora 41+. 88f327493 rhel: Don't build network scripts package on RHEL 9+ with Fedora spec. 1d57509ef treewide: Fix discarded-qualifers warnings. 431efcdfc ovsdb-server: Fix relay remotes string check. 6d682ae53 dpif-offload: Move port manager into struct dpif_offload. d56120f43 ofproto-dpif-xlate: Avoid mirroring on recirculation. 1d6a51917 cirrus: Use FreeBSD release images instead of stable snapshots. 97b3a3507 automake: Don't install the libopenvswitchavx512. fcf733472 dpif-netdev: Fix per-datapath initialization using once framework. 52e740da7 dpif: Always call dpif_offload_set_config(). dbfe60a32 fedora: Fix package install on Fedora 43. 0062d99d4 ipsec: libreswan: Consider active only when child SA is established. 122e79a49 ipsec: libreswan: Silence warning about overriding auto=route in v5.3. f3d704541 ipsec: libreswan: Fix warning for obsolete keyingtries in v5. 59c56bcf6 system-ipsec.at: Use natural sorting for SA list. 75ba627dc dpif-offload: Take a reference when dumping a collection. a56bfa103 rconn: Fix fd leak when close monitor. b672ea19d dpif-offload: Move provider priority to interface level. e7d7d33f4 ovs-router: Fix JSON type for user in rules/show. b63ec0e35 dpdk: Avoid maybe uninitialized for found_value variable. 5057e33f9 dpif-offload: Rename offload provider local functions and structures. bcec20c86 Prepare for 3.7.0. e03eac274 ovs-router: Fix potential integer overflow. 708c83f20 ovs-router: Fix JSON object leak in ovs/router/rule/show command. 3200111ba ofproto-dpif: Limit recirc_id to 28 bits for TC compatibility. a9b1b6b5b netdev-offload-tc: Make sure tcf_id chain doesn't exceed upper limit. 39006533f openflow: Increase number of registers to 32. 9604659d4 tests: Fix QoS tests for tc rounding behavior change. e6cce559c AUTHORS: Add Felix Moebius. adc588f96 ovsdb: raft: Reset connections with incorrect cluster/server ids. 67e21fdb1 odp-util: Fixes for the set(nsh) action commit. b21ba0834 tunnels: Don't unwildcard tunnel fields on write. 63469676d Documentation: Document Assisted-by tag. 68f7a6200 python: dns: Do not treat never accessed responses as expired. 289e9f6ba tests: Add a simple DPDK rte_flow test framework. 90b6e83be tests: Fix NSH decap header test for real Ethernet devices. b8f6e3eee netdev-offload: Fold netdev-offload APIs and files into dpif-offload. ca7bcdc70 dpif-offload-dummy: Add flow add/del/get APIs. 7bd1867b6 dpif-offload-dpdk: Abstract rte_flow implementation from dpif-netdev. 476123c12 dpif-offload: Move offload_stats_get() API to dpif-offload. 7f0e09ebf dpif_netdev: Fix nullable memcpy in queue_netdev_flow_put(). c443e63c1 dpif-offload: Add inline flow APIs for userspace datapaths. ce8027140 netdev-offload: Remove the global netdev-offload API. 35b91ea98 dpif-offload: Move the netdev_any_oor() API to dpif-offload. 3792d6310 netdev_dummy: Remove hardware offload override. fd3f56d1f dpif-offload-tc: Remove netdev-offload dependency. e1cabfaff dpif-netlink: Remove entangled hardware offload. 98b20d8b1 dpif-offload: Add flow operations to dpif-offload-tc. 84997680f dpif: Add dpif_get_features() API. 5362e83ba dpif-netdev: Remove indirect DPDK netdev offload API calls. fec8b4d30 dpif-offload: Add port dump APIs to dpif-offload. 9a4dd063b netdev-offload: Temporarily move thread-related APIs to dpif-netdev. 030b9dc97 dpif-offload: Add operate implementation to dpif-offload. b6ce8be52 dpif-offload: Add API to find offload implementation type. fba024678 dpif-netlink: Add API to get offloaded netdev from port_id. 9d61b5277 dpif-netlink: Remove netlink-offload integration. 5746e83cf dpif-offload: Move the tc flow dump netdev APIs to dpif-offload. c766f57d4 dpif-offload: Add flow dump APIs to dpif-offload. efdd5bf37 dpif-offload: Move hw_post_process netdev API to dpif. 8bf2658c8 dpif-offload: Move the flow_get_n_flows() netdev-offload API to dpif. 389954013 dpif-offload: Call meter netdev-offload APIs via dpif-offload. d1d989b05 dpif-offload: Call flow-flush netdev-offload APIs via dpif-offload. 08d8a6692 dpif-offload: Introduce provider debug information API. 5c9b96ed5 dpif-offload: Allow per-port offload provider priority config. 134455376 dpif-offload: Validate mandatory port class callbacks on registration. a23b2f421 dpif-offload-dpdk: Add port management framework. 2180857f3 dpif-offload-tc: Add port management framework. dd69c0bca dpif-offload: Add port registration and management APIs. bd6543466 dpif-offload: Add offload provider set_config API. dc9724b8f dpif-offload: Move hw-offload configuration to dpif-offload. a13db17b8 dpif-offload: Allow configuration of offload provider priority. d9cc25e51 dpif-offload: Add provider for dpdk (rte_flow). df26a15a4 dpif-offload: Add provider for tc offload. 7eb9ffac5 dpif-offload-provider: Add dpif-offload-provider implementation. 7c2a1c865 AUTHORS: Add yaolingfei. a2d5d84d6 bridge: Enhancement of the validation for controller parameters. 733083653 python: Replace deprecated License with License-Expression (PEP 639). c14bfc4b3 ovs-router: Add test for lookup with rules. e2a241560 ovs-router: Introduce ovs/route/rule/{add, del} commands. 18de57d26 ovs-router: Add 'src=src_ip' parameter in ovs/route/lookup. 160e0dca7 ovs-router: Add 'table=id' parameter in ovs/route/{add, del}. 664494694 ovs-router: Add system test for tables and rules. 5c30756a3 ovs-router: Introduce ovs/route/rule/show command. 5a6a2ebb8 ovs-router: Drop 'local' and add 'user' flag to ovs_router_entry. 884567668 ovs-router: Add 'table=id' parameter in ovs/route/show. e1c267c38 doc: Fix font formatting in ofproto-tnl-unixctl.man. dc14e92bc route-table: Introduce multi-table route lookup. d4798b5e7 ovs-router: Add infrastructure for multi-table routing. ed0f34a17 dp-packet-gso: Fix segment count helpers sign. b5e6e609c packets: Rework outer checksum helper for Coverity. 921628ff7 NEWS: Deprecate support for AVX512-optimized features. c34c21bb0 ovsdb: raft: Actually suppress the disruptive server. f77513b47 netdev-afxdp: Fix impossible typo. f06d64b84 extract_ofp_fields: Check the OXM extension field range. 4e44e51d1 tunnel: Avoid matching on df and csum flags. d0f074dec netdev: Use HW segmentation without outer UDP checksum. ef762327f dp-packet-gso: Refactor software segmentation code. d88363024 dp-packet: Optimize outer checksum for nested checksums. 9d9f17af8 dp-packet: Strip tunnel info when unneeded. f8cd315bd dp-packet-gso: Request UDP checksum when needed. 9943a5977 dpif-netdev: Enhance checksum coverage for tunnels. 9d28a3245 dpif-netdev.at: Add helpers for checksum tests. 8813cc6c0 dpif-netdev.at: Rename checksum offloads tests. 4c83fae88 netdev-dpdk: Fix TSO packet length check for tunnels. 63c08daa9 netdev-dpdk: Enforce mono-segment mbufs. 970d9eb94 netdev-dpdk: Fix rx queue fill level with QoS. 40120c91e classifier: Remove leftover bits of classifier partitioning. 5f12cd410 ovsdb: raft: Discard pre-vote replies during the actual election. 167a16a1a netdev-afxdp: Require kernel v5.4+ and need-wakeup. 875d26158 ofproto-dpif-xlate: Log clarification for dp_hash method. 5ee7057fa dpdk: Update to use v25.11. 6a21414f2 NEWS: Deprecate running user-space with OOT Kernel module. 6b5f3d0b8 dpif-netlink-rtnl: Tighten probe for OOT Kernel tunnels. 4727452c2 NEWS: Deprecate Windows support. 5be77f1ec ovsdb-idl: Fix returning non-existent rows from uuid lookup. fc406ea5d ovsdb: transaction: Fix logging order of duplicate index rows. 0b29edb5c dns-resolve: Do not treat never accessed responses as expired. 5debc2272 AUTHORS: Add MJ Ponsonby. 7f33eed25 dpif: Maintain upcall_pid, mtu and hash. 3fe7c5d32 dpif-netlink: Fix probing for broken meters on Linux v5.10+. b4c158d97 dpif-netlink: Fix potential leak of a malformed meters netlink reply. 5148ef286 windows: Fix absolute-header.m4 for newer msys2 appearing as cygwin. 5fdcc4518 netdev: Remove legacy duplex API. d44849b7a netdev: Fix full duplex capability for 25G ports. ce0eec8f0 netdev-bsd: Cache features and speed. 3edde97a2 netdev-linux: Fix compatibility with older kernels. 12eb60759 netdev: Fix reported rate for Linux and BSD ports. de6e3ade7 ipf: Work around thread safety warnings with clang 21. 3fa11d1b0 ipf: Fix potential deadlock with the clean thread on exit. 5d0c98d1c dpif-netlink: Fix memory leak when re-add vport channel. 28ec95972 configure: Disable clang 21 warning for uninitialized const fields. 77203b455 thread: Convert init/destroy lock functions to use non-const arguments. 7fb1f600a treewide: Fix clang 21 thread-safety warnings for init/create/destroy. fb5871eb2 treewide: Remove OVS_GUARDED from RCU-based structure fields. 9bfe33e12 ssl: Support for SNI extension in clients for ssl/tls. 367ddc098 stream-ssl: Fix missing OPT_SSL_CIPHERSUITES in STREAM_SSL_CASES. ad0d646a3 odp-execute: Fix null pointer dereference on null nlattr. 1577bfe40 netdev-vport: Free error string from str_to_u8() in tunnel config. 9434a69e0 github: Add a job to build on ubuntu-14.04. efb2c5581 test-psample: Fix missing field initializer warnings on older GCC. 67e5e1998 test-netlink-policy: Fix missing field initializer warnings on older GCC. 367d59960 test-lib-route-table: Add missing RTPROT_BGP definition. f83d2e4d5 netlink: Fix build on kernels < 4.1 due to missing RTA_VIA. 7fb51c4fd m4: Don't add -mno-avx512f if compiler doesn't support it. 42d99eb38 ovsdb-idl: Add a way to assert IDL txn as read only. 2e28fe3a5 offload-dpdk: Don't use 24bit value as 32bit. 56db5a267 compiler: Avoid 'returns_nonnull' attribute warnings on older GCC. 396ed84b7 treewide: Fix unused result warnings in NDEBUG builds. 1231108f6 ofproto-dpif.at: Wait for logs in select group tests. 0f8202e60 dpif-netdev: Optimize rwlock in port query API. 719c616a2 AUTHORS: Add Ivan Burnin. c8d2017e2 checkpatch: Set explicit encoding in do_authors_exist. 8ddc9416d AUTHORS: Add Ihar Hrachyshka. d2622ad07 tests: Remove unnecessary revalidator/wait's. 49d0be1d3 tests: Revalidate on flow change in tunnel-push-pop. c9e43f319 tests: Ignore no tunnel port error on vswitch stop. 4f68c1ca2 tests: Don't fail when test path contains 'p2' string. 3b17f003c tests: Gracefully handle EADDRINUSE string from musl. 735967610 tests: Handle duration= with no fractional part. 9bd249369 dpdk: Use DPDK 24.11.3 release. 57d62cfd4 AUTHORS: Add Aleksandr Smirnov. 79db89c4b id_pool: Prevent requested ID range overflows uint32. af403a464 Documentation: Add section about AI assistants. 2c4596732 appveyor: More robust OpenSSL installation wrt path changes. ca8d92b9c appveyor: Temporarily move to previous image to unblock CI. cd2ff530d dpdk: Convert dpdk-lcore-mask to DPDK lcore args. 7bf5a8b83 dpdk: Clean up dpdk option map. f028ba719 vswitch.xml: Update docs for dpdk-lcore-mask. 310fe3224 netdev-dpdk: Remove workarounds for fixed checksum bugs. 0efebaf86 odp-execute: Fix packet length check for TSO packets. 99cac28f7 netdev-dpdk: Fix IP checksum with net/virtio. c3e16065b netdev-native-tnl: Fix DF bit not being extracted into tunnel flags. 4fe10a771 MAINTAINERS: Move Russell to emeritus status. 9a2169a3f bond: Do not flag a revalidation when adjusting time. 1a8e0153b cirrus: Only update the main FreeBSD repository. 609526ca2 ovsdb: transaction: Silence dereference after null check warning. 7d691c6ea ovsdb: raft: Silence dereference after null check warning. faca0cc47 ovsdb: relay: Silence dereference before null check warning. 3a5ea5f28 ovsdb: trigger: Silence dereference after null check warning. 1856bfa4d ovsdb: monitor: Silence dereference after null check warning. fe90fb3ce ofproto: Fix missing lock when reading oftable->vacancy_up/down. 5deb96425 netdev-offload-dpdk: Fix memory leak for matching fragments. df3703410 AUTHORS: Add Linda Wang. b1e295d46 netdev-offload-dpdk: Fix vport hw-offload stat. e0ee785b1 tests: system-traffic: Fix flaky floating IP test. 6e83dafc4 conntrack: Add support for IPv4 EPRT and EPSV. 8c8d16964 AUTHORS: Add Eli Oliver. d2f1ca089 checkpatch: Add simple python comment spell checking. e141dc9ae Set release date for 3.6.0. 3ffb1c401 ipf: Complete l4 checksum before frag out. 00dcc546a Documentation: Use @development-tools on dnf5. 270de5dfb ofproto: Move group-modify to mod_start instead of mod_finish. f8d457ea2 Prepare for post-3.6.0 (3.6.90). 4a2c90ad8 Prepare for 3.6.0. eeb7d7d99 checkpatch: Separate out the built-in spelling words. b5f898cc3 AUTHORS: Add Alexandra Rukomoinikova. 6f2ca3fb2 db-ctl-base: Added filter option in show command. 943f9096e ovs-vsctl: Exit with error if postdb checks report errors. 0add983b3 ovsdb: Use table indexes if available for ovsdb_query(). 5c4d60671 dpif: Fix infinite netlink loop in dpif_execute_helper_cb. 50e1e57f8 utilities:gdb: Add GDB function to dump Netlink attributes. 6d4044899 docs: Specify retis dependency on USDT probes. 0d9dc8e9c dpif-netlink: Provide original upcall pid in 'execute' commands. 0d5eece55 mcast-snooping: Properly check MLD packet length. 22732c0e6 tests: Add support for running system tests under retis. 049197282 seq: Fix deadlock with the time_init. 1210864a6 netdev-dpdk: Remove unused macro for TSO offloads. 3d2f64e5d ovsdb-idl: Add new functions to check the column type on the server. f5819e699 json: Store short arrays in-place. 1de4a08c2 json: Use functions to access json arrays. 9669b50f5 json: Store short strings in-place. 6c48b29f5 json: Always use the json_string() method to access the strings. 41a4a3723 sparse/socket.h: Add AF_BRIDGE definition. 83af8ee6f tests: ipsec: Adjust status checks for upcoming Libreswan 5.3. 83de251fa ipsec: libreswan: Remove old certs before importing new ones. 80d723736 cirrus: Update to FreeBSD 14.3 and 13.5. 609060370 netdev-dpdk: Remove limit on maximum descriptors count. edecb7404 python: idl: Don't notify the application on _Server database updates. ab062d3cb netdev-dpdk: Adjust IPv4 checksum capability for vhost-user. dd443c1a7 netdev-dpdk: Stop relying on vhost-user Tx flags. b8032fac2 dp-packet: Remove direct access to DPDK offloads. cf7b86db1 dp-packet: Rework TCP segmentation. e36793e11 dp-packet: Resolve unknown checksums. 2956a6126 dp-packet: Rework L4 checksum offloads. 3daf04a4c dp-packet: Rework IP checksum offloads. 67abd5154 dp-packet: Rework tunnel offloads. e2200485c dp-packet: Expand offloads preparation helper. d29ba0abd dp-packet: Add OVS offloading API. 19ef1b1f0 dp-packet: Remove DPDK specific IP version. 52fdeda11 dp-packet: Remove Linux specific L4 offloads. a86ae3c86 python: Add uuid/convert references to uuid for Row.__str__. 8ee7ecb8a db-ctl-base: Allow retrieving rows of type OVSDB_TYPE_UUID. 8a1a0ea7c AUTHORS: Add Changliang Wu. aea473429 lldp: Fix out of bound write in chassisid_to_string. 614029aac conntrack: Allow inner NAT of related fragments. ca9e67c80 daemon-unix: Handle potential negative values from sysconf(). 99af7f379 ovsdb: Fix Coverity leak warning by marking code as unreachable. 2c634482f raft: Fix resource leak from ignored ovsdb_log_write_and_free() error. b90304bfe ovsdb-server: Fix potential memory leak in parse_options(). d1bd62dae ofproto-dpif-upcall: Check odp_tun_key_from_attr() return value. 88737f02e ofproto-dpif-xlate: Fix memory leak in xlate_generic_encap_action(). 8fca3f99c lldp: Fix Coverity warning about resource leak in lldp test. d28382947 sparse: Define new AVX10 includes added in GCC >= 15. 0e419d1b4 sparse: Add workaround for OpenSSL configuration. 8224cd47f tests: tunnel-push-pop: Fix occasional failure of the drop test. e99ce7d5d flow: Fix checksum offloads with simple match. 48ce3a5a5 dpdk: Use DPDK 24.11.2 release. b42f9fde4 netdev-dpdk: Fix possible memory leak in vhost stats. 7e3a0b496 AUTHORS: Add Yang Yang. 60a219300 perf-counter: Enable exclude_guest by default. 2df25f970 util: Remove include of itself. 37848e218 util: Ignore return code from str_to_uint(). e180c431b tests: classifier: Add a stress test for prefixes reconfiguration. 6a61a70fc classifier: Fix race for prefix tree configuration. 9234b9b40 tests: classifier: Fix the rule number check during trie verification. f7711efc9 ovs-router: Fix potential resource leak in JSON output. 5603b869a netdev-linux: Fix offloads for IPv6 UDP packets. c852a8c76 netdev-native-tnl: Do not validate already checked checksum. 71f3dd3e9 conntrack: Fix embedded checksums in ICMP errors. 4b00509ea conntrack: Do not validate already checked checksum. 8a7f1292d ipf: Consider checksum only for fragmented packets. 585c8088e dpif-netdev: Enhance checksum coverage. d49994634 flow: Fix bad IP checksum flag. 261f02ba3 ovs-ctl: Allow to set custom core file size for ovs daemons. d000ff1cd ovs-router: Add JSON output for 'ovs/route/show' command. 6fc522174 ipsec: libreswan: Fix premature reconciliation of just added tunnels. 1b2eff486 github: Add a permanent workaround for malformed /etc/hosts. 28064e9fa AUTHORS: Add Dmitry Porokh. 421c94ee1 ovsdb: Introduce and use specialized uuid print functions. 94500f9bb tests: Run IPv6 ct fragmentation tests in different zones. 8aa649c7b NEWS: Note that OOT kernel module documentation has been removed. 6bd931716 docs: issues: Update for removal of OOT kernel module. ef6cfc0a0 docs: configuration: Don't document OOT kernel module wrt connecting bridges. aea939b24 docs: faucet: Remove references to OOT kernel module. 89e8c1249 docs: general: Remove references to kernel module. 68d742e84 debian: Remove documentation of OOT kernel module. 2b9aca477 docs: debian: Remove references to installing kernel module. e03ccbce6 docs: backporting-patches: Remove documentation of OOT kernel module. e0c07a8a7 docs: release: Remove documentation of OOT kernel module. 1015b13f0 ofproto-dpif-xlate: Add a drop action for native tunnel failure. a53d67bf9 python: idl: Clear rows without losing indexes. f1f214e5c ipsec: libreswan: Fix detection of loaded IPv6 connections. e017142d1 python: Add example usage section to README. 79be51b9c python: Populate README with minimal context. 816f30b06 python: Add 'long_description' to 'setup.py'. 3e63999f9 python: Don't leave file handles open. 8fffcfcf6 AUTHORS: Add Martin Morgenstern. 8c9e7631c jsonrpc: Maximize receive buffer size. ca8c27b7c jsonrpc: Add coverage for incomplete receives. 4443433d2 uuid: Fix a warning about zero byte truncation in the template. fe53b478f dpdk: Fix main lcore on systems with many cores. 20fd9d480 AUTHORS: Add Vasyl Saienko. 96ee23a21 ovs-vtep: Fix vlan binding. 484208bd1 ipf: Maintain packet zone and direction. 056a37d6d ipf: Don't send expired frags. effb2bb28 Documentation: Use mail-archive.com URLs for openflow-discuss ML links. 88ee8ae05 Documentation: Update links to DPDK documentation. 1e577cfb2 AUTHORS: Add Jay Ding. 6f33ac632 netdev-dpdk: Fix device info return value check. ae6b778ab utilities: usdt-scripts: Retry on dp cache miss. 340c574e4 utilities: upcall_monitor: Add extra info to pcap. c2deabc00 utilities: monitor_upcalls: Print ports from drops. acd6d21e3 utilities: upcall_monitor: Print port names. 93ccf58a9 utilities: upcall_cost: Refactor port mapping cache. ca804a7be utilities: upcall_monitor: Allow filtering on result. c40a7ff9b utilities: upcall_monitor: Monitor dropped upcalls. 441407895 utilities: usdt-scripts: Remove sleep in loop. 9d15da43b ovsdb: raft: Fix cluster break down on leaving with some nodes down. 27315463b ovsdb: raft: Add debug logs for role transition. cae3ff452 ovsdb: raft: Fix multitasking overrun warning when there is no leader. 1724a293d ofproto: Log bond rebalancing stats once in rebalance run. ce77927bf ofproto-dpif-xlate: Embed support check in put_drop_action. 50dfd1ce3 AUTHORS: Update email for Ian Stokes. 7f4ee4395 python: Disable check for globals with never reassigned names (F824). ba675897e ofproto-dpif: Fix spelling in comments and the support field macro. f141b7c35 checkpatch.py: Don't run subject checks in source-file mode. 6403a49f3 rhel/systemd: Change owner recursively and also on /etc/openvswitch. f3036be65 utilities: Add long poll statistics to the kernel_delay.py script. 2100a0454 tests: ovsdb-idl: Fix flaky insert and delete tests. 0d21dbc24 python: stream: Fix unlink attempt for ptcp IP address. 0b686a29b ofproto-dpif: Fix dp_hash mapping after select group modification. 3dea4e0fc checkpatch.py: Load multiple codespell dictionaries. a824a6bb2 ovs-tcpdump: Improve 'mirror-to' option. 2d82a431f tests: Disable rate limiting for tests parsing flow dumps from logs. 15b6c25c8 rtnetlink: Add forward declaration of RTPROT_OVN. defb8f33f datapath-windows: Fix possible null reference in _MapNlAttrToOvsPktExec 69f0acc9a tests: Fix 'ICMP related with SNAT' test case in offload scenario. b65f324a7 AUTHORS: Add Dima Chumak. 1898112c8 ofproto: Add JSON output for 'fdb/show' command. 69826ad63 appveyor: Fix python PATH for a new pywin32-309. 0bdca8bf5 tests: system-traffic: Remove unnecessary bash dependency. 472847e69 AUTHORS: Add Frank Wagner. a68887e1f windows: Fixed MSYS detection in CCCL. caa2c8c77 github: Get sparse from the official GitHub mirror. b83d3f51e netdev-offload-dpdk: Clean up vlan_push action function. 008759411 route-table: Rename bridge-related variables/arguments to netdev. 71a9720b7 netdev-offload-tc: Add missing comment from commit 273a4fce951a. d56a5bacd python: ovsdb-idl: Fix persist_uuid references. 5ee2a3892 python: ovsdb-idl: Handle inserts w/o changes. 7b4d3137a stream-ssl: Remove support for deprecated TLSv1 and TLSv1.1. 19b894162 tunnels: Remove support for deprecated STT and LISP. 410e0f519 ofproto-dpif-xlate: Fix source IP lookup for non-bridge ports. 5292eb50a netdev-offload-tc: Only install recirc flows if the parent is present. 0fb370bdc flow: Explicitly pad tcp_flags for TCP and tp_dst for IGMP. cb9e21dc3 netdev-offload-dpdk: Support offload of clone push_vlan action. 365c2e504 Set release date for 3.5.0. fd021c97e tests: Use correct arguments to curl. ac32bbe2c dpif-netdev: Fix Auto Load Balance debug log. 9f7eb58f7 miniflow_extract: Push ct_tp_{src, dst} for later frags. c77175824 dpif-netdev: Preserve inner offloads on recirculation. 4baddffd5 ovsdb-server: Do not use filename after free. b9be72920 netdev-vport: Ignore ipsec_ tunnel option prefix for all tunnels. ce20ca063 ofproto-dpif-xlate: Fix memory leak in xlate_generic_encap_action(). f7c85a730 ofproto: Fix potential NULL pointer dereference in ofproto_type_xx(). 9e784ed6c ofproto: Fix potential null-ptr dereference in meter_insert_rule(). 5f6b8faca ofproto-dpif-ipfix: Add NULL check to dpif_ipfix_set_options(). 68245b0c4 tests: Fix multiple Coverity warnings in test programs. de39a5587 ovs-vsctl: Fix missing ovs_scan() return checks. 1936de256 nx-match: Fix potential integer underflow. f2fac92e3 github: Update fedora image to 41. 35f49a595 documentation: Fix Sphinx program directive. 885e117fd documentation: Fix ovs-flowviz warnings on older Sphinx. ed133507f fedora: Don't generate network-scripts-openvswitch for ver > 40. 481bc0979 route-table: Allow parsing routes without nexthop. c5b3ac72d vlog: Add user command to inject log message. cde106949 sparse: Remove wrappers for some DPDK headers. f0e6638cf netdev-offload-tc: Fix ignore of dl type mask when installing flows. 8011f9ff9 faq: Update DPDK releases for older branches. 3e100bd93 AUTHORS: Add Markus Linnala. ec8fe88d7 utilities/bashcomp: Do not run ovs-vsctl when not possible. 2472845c3 general: Use ovs_get_program_version(). ad59bb851 ovs-ctl: Allow to set oom-score for ovs daemons. ae8dafe6b dpdk: Add ovs-appctl dpdk/get-memzone-stats command. 1594c5086 ofproto-macros.at: Fix hex matching in the strip_recird() macro. a3c06c309 route-table: Use ofpbuf_use_const() for multipath attributes. be5b46564 route-table: Fix potential memory leak. f74777da0 route-table: Avoid potential NULL ptr dereference. e16db1230 ofp-ct: Add missing struct declaration. caed64d16 Prepare for post-3.5.0 (3.5.90). Signed-off-by: Bruce Ashfield

cni: update to v1.3.0

2026-03-25T23:30:27+00:00

Bumping cni to version v0.8.0-340-g7c27007, which comprises the following commits: f1cb561 docs: Fix broken link to "Version considerations" in SPEC.md 77b1001 spec: update number of specifically defined terms Bumping cni-plugins.git to version v1.1.0-395-g6d8f05b8, which comprises the following commits: 6d8f05b8 Bump go version to 1.26 f9f86fdf fix revive linter b2f23299 Update go.mod to Go 1.25. adc3e6b5 bridge: include attempted IP address in AddrAdd error message 4161e445 build(deps): bump golangci/golangci-lint-action from 8 to 9 dada84a9 CVE-2025-52881: Bump selinux to 1.13.0 dfb1f9ac fix(test): use shorter veth peer name ccc8314d vrf: fix route filtering to preserve IPAM-configured routes 8c4a6b3b bandwidth: handle nil bandwidth in CHECK 9b3772e1 portmap: ensure nftables backend only intercept local traffic Bumping flannel-cni-plugin.git to version v1.9.0-flannel1-12-g09e4c7f, which comprises the following commits: 09e4c7f Bump google.golang.org/grpc from 1.69.0 to 1.79.3 99c8f33 Bump golang from 1.25.6-alpine3.22 to 1.25.7-alpine3.22 a1f477f Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 9d9dbae Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 122c4fd Bump alpine from 3.23.2 to 3.23.3 f5fdb63 Bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22 e70badd Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.5 b84eef9 Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 a10ad00 Bump alpine from 3.23.0 to 3.23.2 8b6781f Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 be2d572 Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 0940aaf Bump github.com/containernetworking/plugins from 1.8.0 to 1.9.0 521b4f6 Bump alpine from 3.22.2 to 3.23.0 dfcb1ec Bump golang from 1.25.4-alpine3.22 to 1.25.5-alpine3.22 5d45388 Bump golang from 1.24.9-alpine3.22 to 1.25.4-alpine3.22 Signed-off-by: Bruce Ashfield

cni: regenerate go-mod/shallow/hybrid

2026-01-04T16:47:30+00:00

There were some issues with hyrid vcs mode and shallow clones. The tools have been updated to deal with those issues, so we regenerate to pick them up. Signed-off-by: Bruce Ashfield

cni: update to v1.3.0

2025-12-09T01:57:44+00:00

Signed-off-by: Bruce Ashfield

cni: update to go-mod-vcs format

2025-12-09T01:57:44+00:00

Signed-off-by: Bruce Ashfield

openvswitch: small ptest fix adapt to UNPACKDIR changes

2025-07-21T02:36:08+00:00

Assume the build conf dir is /mnt/test/build_auh before UNPACKDIR change: S="/mnt/test/build_auh/tmp/work/qemuarm64-poky-linux/openvswitch/3.5.0/git" after UNPACKDIR change: S="/mnt/test/build_auh/tmp/work/qemuarm64-poky-linux/openvswitch/3.5.0/sources/openvswitch-3.5.0" Then we should change ptest patch to adapt to it Signed-off-by: Liu Yiding Signed-off-by: Bruce Ashfield