Patch release notes 2110e
Release notes for Vyatta NOS 2110e, released July 29, 2022.
Issues resolved
Issues resolved in release 2110e.
| Issue number | Priority | Summary |
|---|---|---|
| VRVDR-58161 | Blocker | QinQ: The CLI prompt does not return after deleting the VIF config from the data plane interface |
| VRVDR-57773 | Blocker | OSPFv3 process resets |
| VRVDR-57606 | Blocker | Incorrect reboot reason for power failure to DUT and missing cold reboot trap |
| VRVDR-58253 | Critical | PTP: Packet counters not returned for SNMP queries |
| VRVDR-58191 | Critical | Remove the install default user from cloud instances |
| VRVDR-57976 | Critical | Azure: VM startup shows AttributeError: 'array.array' object has no attribute 'tostring' |
| VRVDR-57656 | Critical | strongswan fails to start – in-line CA certificate is not loaded |
| VRVDR-57640 | Critical | Static IP configuration of Azure VNets and Vyatta data plane |
| VRVDR-57418 | Critical | NTP using loopback as source-interface from bootup rather than interface address until any NTP configuration is done |
| VRVDR-57280 | Critical | show interface dataplane physical broken – fails to return data |
| VRVDR-57155 | Critical | VRRP virtual address not routable |
| VRVDR-57146 | Critical | QinQ: The config prompt does not return after deleting the vif from the data plane interface |
| VRVDR-57059 | Critical | BFD failed to create hw object |
| VRVDR-56804 | Critical | Core dump in libvirtd when configuring guest |
| VRVDR-58377 | Major | CPU-affinity conflict test fails when configured with same CPU (shared by other features) for BFD data plane |
| VRVDR-58169 | Major | mount /mnt failure observed during router boot |
| VRVDR-58168 | Major | Various warning messages seen during VM power-up |
| VRVDR-58119 | Major | IPsec RAVPN: X509 authentication fails, presumably due to missing fragmentation support |
| VRVDR-57936 | Major | Aggregate SIAD BFD flapping with remote side as Juniper QFX |
| VRVDR-57814 | Major | IPsec: crash of IKE control-plane during shutdown or VRRP backup-transition |
| VRVDR-57797 | Major | IPsec: Crypto device limit causing tunnel setup failure |
| VRVDR-57504 | Major | S9500-30XS port SI value setting discrepancy between UFI provided values and the active port setting used |
| VRVDR-57284 | Major | Cisco-Finisar I-temp QSFP failed to work with S9500-30XS |
| VRVDR-57786 | Minor | vyatta-ptp-mib-subagent[6333]: Bad value for .1.3.6.1.2.1.241.1.2.5.1.5.44.2.0 |
| VRVDR-57777 | Minor | NTPd: Logging bind cannot assign requested address to journal logs every 5 minutes |
| VRVDR-57760 | Minor | SYN_SENT no longer displayed in journal and logs up on upgrade from 1801zf to 1912q |
Security vulnerabilities resolved
Security vulnerabilities resolved in 2110e.
| Issue number | CVSS | Advisory | Summary |
|---|---|---|---|
| VRVDR-57991 | 9.8 | DSA-5140-1 | CVE-2022-29155: Debian DSA-5140-1: openldap – security update |
| VRVDR-57926 | 9.8 | DSA-5139-1 | CVE-2022-1292: Debian DSA-5139-1: openssl – security update |
| VRVDR-57734 | 9.8 | DSA-5130-1 | CVE-2021-3839, CVE-2022-0669: Debian DSA-5130-1: dpdk – security update |
| VRVDR-58044 | 9.1 | DSA-5142-1 | CVE-2022-1664: Debian DSA-5147-1: dpkg – security update |
| VRVDR-57161 | 8.8 | DSA-5092-1 | CVE-2021-43976, CVE-2022-0330, CVE-2022-0435, CVE-2022-0516, CVE-2022-0847, CVE-2022-22942, CVE-2022-24448, CVE-2022-24959, CVE-2022-25258, CVE-2022-25375: Debian DSA-5092-1: linux – security update |
| VRVDR-58081 | 8.1 | DSA-5150-1 | CVE-2022-24903: Debian DSA-5150-1: rsyslog – security update |
| VRVDR-57692 | 7.8 | DSA-5127-1 | CVE-2021-4197, CVE-2022-0168, CVE-2022-1016, CVE-2022-1048, CVE-2022-1158, CVE-2022-1195, CVE-2022-1198, CVE-2022-1199, CVE-2022-1204, CVE-2022-1205, CVE-2022-1353, CVE-2022-1516, CVE-2022-26490, CVE-2022-27666, CVE-2022-28356, CVE-2022-28388, CVE-2022-28389, CVE-2022-28390, CVE-2022-29582: Debian DSA-5127-1: linux – security update |
| VRVDR-57189 | 7.8 | DSA-5095-1 | CVE-2020-36310, CVE-2022-0001, CVE-2022-0002, CVE-2022-0487, CVE-2022-0492, CVE-2022-0617, CVE-2022-25636: Debian DSA-5095-1: linux – security update |
| VRVDR-57353 | 7.5 | DSA-5111-1 | CVE-2018-25032: Debian DSA-5111-1: zlib – security update |
| VRVDR-57317 | 7.1 | DSA-5108-1 | CVE-2022-0561, CVE-2022-0562, CVE-2022-0865, CVE-2022-0891, CVE-2022-0907, CVE-2022-0908, CVE-2022-0909, CVE-2022-0924, CVE-2022-22844: Debian DSA-5108-1: tiff – security update |
| VRVDR-58292 | 6.5 | DSA-5174-1 | CVE-2022-34903: Debian DSA-5174-1: gnupg2 – security update |
| VRVDR-58014 | 6.5 | DSA-5142-1 | CVE-2022-29824: Debian DSA-5142-1: libxml2 – security update |