Patch release notes 2204f
Release notes for Vyatta NOS 2204f, released October 6, 2023.
Issues resolved
Issues resolved in 2204f.
| Issue number | Priority | Summary |
|---|---|---|
| VRVDR-61276 | Critical | Data plane and/or RIBd crash causes VRRP failover |
| VRVDR-46123 | Critical | Copy Command: SCP copy gives cURL: (67) Authentication failure when no password given |
| VRVDR-61825 | Major | QoS Shaper does not work for Mellanox ConnectX-5 |
| VRVDR-61678 | Major | VRRP state remains as Master-Master with the net_ixgbe interface driver |
| VRVDR-61556 | Major | Data plane crashes in MLX5 poll mode driver |
| VRVDR-61510 | Major | Bonding interface is down after the ICR0: malicious programming detected message for the i40e pmd driver |
| VRVDR-60872 | Major | opd.log file continuously increases causing disk space consumption and issues |
| VRVDR-60589 | Major | New VRRPv3 VIF shows FAULT state in routing-instance |
| VRVDR-60453 | Major | Mellanox ConnectX-5 VF interfaces fail to initialize on 16 CPU systems |
Security vulnerabilities resolved
Security vulnerabilities resolved in 2204f.
| Issue number | CVSS | Advisory | Summary |
|---|---|---|---|
| VRVDR-62201 | 9.8 | DLA-3575-1 | CVE-2021-23336, CVE-2022-0391, CVE-2022-48560, CVE-2022-48565, CVE-2022-48566, CVE-2023-24329, CVE-2023-40217: Debian DLA-3575-1: python2.7 – LTS security update |
| VRVDR-62185 | 9.8 | DLA-3567-1 | CVE-2020-22217: Debian DLA-3567-1: c-ares – LTS security update |
| VRVDR-61846 | 9.8 | DLA-3532-1 | CVE-2023-38408: Debian DLA-3532-1: openssh – LTS security update |
| VRVDR-62184 | 9.6 | DLA-3570-1 | CVE-2023-4863: Debian DLA-3570-1: libwebp – LTS security update |
| VRVDR-62107 | 8.1 | DLA-3559-1 | CVE-2019-13115, CVE-2019-17498, CVE-2020-22218: Debian DLA-3559-1: libssh2 – LTS security update |
| VRVDR-60642 | 5.4 | DLA-3388-1 | CVE-2021-44225: Debian DLA-3388-1: keepalived – LTS security update |
| VRVDR-61843 | 5.3 | DLA-3530-1 | CVE-2023-3446, CVE-2023-3817: Debian DLA-3530-1: openssl – LTS security update |
| VRVDR-61845 | 3.9 | DLA-3531-1 | CVE-2023-20867: Debian DLA-3531-1: open-vm-tools – LTS security update |
New features
New features introduced in 2204f.
| Issue number | Priority | Summary |
|---|---|---|
| VRVDR-61462 | Critical | FlowMon – support for specifying the source IP address for the netflow export packet |
| VRVDR-61369 | Critical | BGP – support for graceful shutdown |
| VRVDR-61312 | Critical | BGP – support for attribute-map in aggregated routes |
| VRVDR-43685 | Critical | BGP – support for replace-as |
| VRVDR-43684 | Critical | BGP – support for no-prepend |
| VRVDR-43683 | Critical | BGP – support for disable-connected-check |
Known issues
Known issues identified in 2204f.
| Issue number | Priority | Summary |
|---|---|---|
| VRVDR-62269 | Major | Adding or removing config for VIFs or VRRP flaps BGP and VRRP |