SUSE-RU-2024:0718-1: important: Recommended update for aardvark-dns, netavark

SLE-UPDATES null at suse.de
Thu Feb 29 12:36:27 UTC 2024



# Recommended update for aardvark-dns, netavark

Announcement ID: SUSE-RU-2024:0718-1  
Rating: important  
References:

  * jsc#PED-7577

  
Affected Products:

  * Containers Module 15-SP5
  * openSUSE Leap 15.5
  * SUSE Linux Enterprise High Performance Computing 15 SP5
  * SUSE Linux Enterprise Micro 5.5
  * SUSE Linux Enterprise Real Time 15 SP5
  * SUSE Linux Enterprise Server 15 SP5
  * SUSE Linux Enterprise Server for SAP Applications 15 SP5

  
  
An update that contains one feature can now be installed.

## Description:

This update for aardvark-dns and netavark fixes the following issues:

aardvark-dns was updated to version 1.10.0 (jsc#PED-7577):

  * Changes in version 1.10.0:

  * chore(deps): update rust crate chrono to 0.4.32

  * chore(deps): update dependency containers/automation_images to v20240102
  * fix(deps): update rust crate futures-util to 0.3.30
  * fix(deps): update rust crate anyhow to 1.0.79
  * fix(deps): update rust crate tokio to 1.35.1
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35.0
  * fix duplicated IP CI flake
  * server: remove unused kill switch
  * fix(deps): update rust crate clap to ~4.4.10

  * Changes in version 1.9.0:

  * run cargo update

  * chore(deps): update dependency containers/automation_images to v20231116
  * fix(deps): update rust crate tokio to 1.34.0
  * fix(deps): update rust crate async-broadcast to 0.6.0
  * update trust-dns to hickory
  * fix(deps): update rust crate futures-util to 0.3.29
  * fix(deps): update rust crate trust-dns-server to 0.23.2
  * fix(deps): update rust crate trust-dns-proto to 0.23.2
  * tmt: initial enablement
  * aardvark main: change error reporting
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate trust-dns-proto to 0.23.1
  * fix(deps): update rust crate trust-dns-client to 0.23.1
  * clippy: some format fixes
  * fix(deps): update rust crate tokio to 1.33.0

  * Changes in version 1.8.0:

  * run cargo update

  * Packit: switch to @containers/packit-build team for copr failure
    notification comments
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * cargo: bump chrono to 0.4.30
  * test: IPv6 format is changed in v1.72.0
  * bump nix to 0.27.1
  * vendor: bump trust_dns_proto and trust_dns_client to 0.23.0
  * fix(deps): update rust crate trust-dns-server to 0.23.0
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate anyhow to 1.0.75
  * fix(deps): update rust crate tokio to 1.32.0
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate tokio to 1.31.0
  * fix(deps): update rust crate anyhow to 1.0.74
  * fix(deps): update rust crate anyhow to 1.0.73
  * fix(deps): update rust crate log to 0.4.20
  * chore(deps): update dependency containers/automation_images to v20230809
  * fix(deps): update rust crate tokio to 1.30.0
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate anyhow to 1.0.72
  * fix(deps): update rust crate signal-hook to 0.3.17
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate signal-hook to 0.3.16
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate tokio to 1.29.1
  * fix(deps): update rust crate clap to 4.3.10
  * [CI:BUILD] RPM: cleanup spec and fix eln builds

  * Disable restricting builds only for tier1 platforms i.e. only for x86_64 and
    aarch64 and enable for all.

  * Changes in version 1.7.0:

  * fix(deps): update rust crate tokio to 1.29.0

  * fix(deps): update rust crate clap to 4.3.8
  * fix(deps): update rust crate clap to 4.3.5
  * run cargo update
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * fix(deps): update rust crate clap to 4.3.2
  * fix(deps): update rust crate clap to 4.3.1
  * cirrus: remove verify_vendor task
  * chore(deps): update dependency containers/automation_images to v20230601
  * fix(deps): update rust crate trust-dns-server to 0.22.1
  * chore(deps): update rust crate chrono to 0.4.26
  * fix(deps): update rust crate tokio to 1.28.2
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate tokio to 1.28.1
  * chore(deps): update dependency containers/automation_images to v20230426
  * fix(deps): update rust crate clap to 4.2.7
  * fix(deps): update rust crate anyhow to 1.0.71
  * fix typo in makefile
  * fix(deps): update rust crate tokio to 1.28.0
  * fix(deps): update rust crate clap to 4.2.5
  * fix(deps): update rust crate syslog to ^6.1.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.3
  * fix(deps): update rust crate clap to v4
  * chore(deps): update dependency containers/automation_images to v20230405

  * Changes in version 1.6.0:

  * fix(deps): update rust crate tokio to 1.27.0

  * use lower TTL for contianer entries
  * fix(deps): update rust crate syslog to ^6.0.1
  * fix(deps): update rust crate futures-util to 0.3.28
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump futures-util from 0.3.26 to 0.3.27
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * build(deps): bump anyhow from 1.0.68 to 1.0.70
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump chrono from 0.4.23 to 0.4.24
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * build(deps): bump async-broadcast from 0.5.0 to 0.5.1
  * build(deps): bump signal-hook from 0.3.14 to 0.3.15
  * build(deps): bump futures-util from 0.3.25 to 0.3.26
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * [CI:DOCS] Clarify packit related comments
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * Switch to explicit platform list for `cargo vendor-filterer`
  * Add renovate.json5
  * Cirrus: Groom rust cache before updating

netavark was update to version 1.10.2 (jsc#PED-7577):

  * Changes in version 1.10.2:

  * Fixed aardvark-dns handling

  * Do not perform network namespace detection on AV update

  * Changes in version 1.10.1:

  * Updated to nftables release 0.3 from crates.io

  * DISTRO_PACKAGE: fix incorrect vendored tar archive URL
  * Bump to 1.11.0-dev

  * Changes in version 1.10.0:

  * RPM: update .cargo/config before building

  * Added support for isolation to the nftables driver
  * build(deps): bump h2 from 0.3.22 to 0.3.24
  * chore(deps): update rust crate chrono to 0.4.32
  * fix(deps): update rust crate env_logger to 0.11.0
  * chore(deps): update dependency containers/automation_images to v20240102
  * Bump nftables-rs to latest commit
  * Netavark: nftables support
  * fix(deps): update rust crate serde_json to 1.0.111
  * feat: added the --firewall-driver option
  * Document how to generate a code coverage report for netavark
  * fix(deps): update rust crate clap to ~4.4.12
  * fix(deps): update rust crate serde_json to 1.0.110
  * fix(deps): update rust-futures monorepo to 0.3.30
  * fix(deps): update rust crate nispor to 1.2.16
  * chore(deps): update rust crate tempfile to 3.9.0
  * Use tonic::transport::Uri instead of HTTP
  * chore(deps): update dependency containers/automation_images to v20231208
  * fix(deps): update rust crate tokio to 1.35
  * dhcp-proxy: return actual error instead of generic one
  * dhcp-proxy: skip set gateway if missing
  * bump netlink-packet-route to 0.18.1
  * chore(deps): update rust crate once_cell to 1.19.0
  * fix(deps): update rust crate nispor to 1.2.15
  * fix(deps): update rust crate serde to 1.0.193
  * fix(deps): update rust crate clap to ~4.4.10
  * aardvark: show error if process is in wrong netns
  * aardvark: remove unessesary unlock lockfile calls
  * fix(deps): update rust crate url to 2.5.0
  * Bump working version to v1.10.0-dev

  * Changes in version 1.9.0:

  * test: fix syntax problem in helpers.bash

  * run cargo update
  * use OsString/Path over String for file paths
  * chore(deps): update dependency containers/automation_images to v20231116
  * firewalld-reload: fix CI tests
  * firewalld-reload: prevent race which could leak fw rules
  * fix(deps): update rust crate clap to ~4.4.8
  * CI: skip broken firewalld test
  * fix(deps): update rust crate http to 0.2.11
  * rpm: add netavark-firewalld-reload.service to spec
  * firewalld-reload: add integration tests
  * firewall/state: make sure to ignore enoent on read
  * firewall-reload: integrate actual logic to reload rules
  * firewall/state: improve error messages
  * firewall: add state functions to serialize configs
  * firewalld: fix lint errors with rust v1.73
  * firewall: do not use full Network in NetworkStruct
  * firewall: add dns_port to SetupNetwork
  * add firewalld-reload subcommand
  * fix(deps): update rust crate http to 0.2.10
  * fix(deps): update rust crate env_logger to 0.10.1
  * fix(deps): update rust crate tokio to 1.34
  * Update rust container build files
  * bridge: force static mac on bridge interface
  * fix(deps): update rust crate futures-core to 0.3.29
  * fix(deps): update rust crate serde to 1.0.190
  * fix(deps): update rust crate serde_json to 1.0.108
  * fix(deps): update rust crate sysctl to 0.5.5
  * fix(deps): update rust-futures monorepo to 0.3.29
  * CI: Drop CI VM distro name
  * chore(deps): update dependency containers/automation_images to v20231004
  * fix(deps): update rust crate tokio to 1.33
  * build-sys: Filter to tier 2 Linux declaratively
  * fix(deps): update rust crate sha2 to 0.10.8
  * fix podman.io community link
  * Bump to v1.9.0-dev

  * Changes in version 1.8.0:

  * run cargo update

  * Add vrf support for bridges
  * Packit: switch to @containers/packit-build team for copr failure
    notification comments
  * fix(deps): update rust crate nispor to 1.2.14
  * [CI:BUILD] Packit: tag @lsm5 on copr build failures
  * chore(deps): update rust crate chrono to 0.4.31
  * fix(deps): update rust crate serde_json to 1.0.107
  * rust io safety: convert RawFd to BorrowedFd<>
  * bump nix to 0.27.1
  * chore(deps): update rust crate chrono to 0.4.30
  * fix(deps): update rust crate serde_json to 1.0.106
  * chore(deps): update rust crate chrono to 0.4.29
  * fix(deps): update rust crate netlink-packet-route to 0.17.1
  * Bump tonic and prost
  * Update container image to F38
  * Add ACCEPT rules in firewall for bridge network with internal dns.
  * chore(deps): update rust crate tonic-build to 0.10
  * fix(deps): update rust crate nispor to 1.2.13
  * fix(deps): update rust crate serde to 1.0.188
  * Fix clippy warnings about formatting
  * update chrono crate
  * fix(deps): update rust crate url to 2.4.1
  * Add protoc dependency to README
  * [CI:BUILD] rpm: spdx compatible license field
  * fix(deps): update rust crate tokio to 1.32
  * chore(deps): update dependency containers/automation_images to v20230816
  * fix(deps): update rust crate serde_json to 1.0.105
  * fix(deps): update rust crate tokio to 1.31
  * fix(deps): update rust crate log to 0.4.20
  * run cargo update
  * update tonic-build to 0.9.2
  * bump rust edition to 2021
  * iptables: drop invalid packages
  * fix(deps): update rust crate tokio to 1.30
  * docs: Convert markdown with go-md2man instead of mandown
  * fix(deps): update rust crate clap to 4.3.21
  * packit: Build PRs into default packit COPRs
  * chore(deps): update dependency containers/automation_images to v20230807
  * fix(deps): update rust crate serde to 1.0.183
  * fix(deps): update rust crate serde to 1.0.181
  * fix(deps): update rust crate serde to 1.0.180
  * fix(deps): update rust crate serde_json to 1.0.104
  * fix(deps): update rust crate serde to 1.0.179
  * fix(deps): update rust crate serde to 1.0.176
  * fix(deps): update rust crate clap to 4.3.19
  * fix(deps): update rust crate serde to 1.0.175
  * fix(deps): update rust crate clap to 4.3.17
  * fix(deps): update rust crate clap to 4.3.15
  * fix(deps): update rust crate clap to 4.3.12
  * fix(deps): update rust crate serde_json to 1.0.103
  * [CI:BUILD] Packit: remove pre-sync action
  * fix(deps): update rust crate serde_json to 1.0.102
  * fix(deps): update rust crate nispor to 1.2.12
  * macvlan: use netlink type for bclim
  * bump netlink deps
  * fix(deps): update rust crate serde to 1.0.171
  * fix(deps): update rust crate serde to 1.0.167
  * fix(deps): update rust crate clap to 4.3.11
  * fix(deps): update rust crate serde to 1.0.166
  * fix(deps): update rust crate serde_json to 1.0.100
  * iptables: improve error when ip6?tables commands are missing
  * fix(deps): update rust crate clap to 4.3.10
  * fix(deps): update rust crate zbus to 3.14.1
  * [CI:BUILD] RPM: Fix ELN build and cleanup spec
  * bump to v1.8.0-dev

  * Changes in version 1.7.0:

  * fix(deps): update rust crate tokio to 1.29

  * netavark: make --config required for dns
  * fix(deps): update rust crate serde_json to 1.0.99
  * fix(deps): update rust crate clap to 4.3.8
  * [CI:BUILD] Packit: add Fedora downstream tasks
  * run cargo update
  * fix(deps): update rust crate serde_json to 1.0.97
  * fix(deps): update rust crate sha2 to 0.10.7
  * fix(deps): update rust crate clap to 4.3.4
  * chore(deps): update dependency containers/automation_images to v20230614
  * fix(deps): update rust crate clap to 4.3.3
  * fix(deps): update rust crate log to 0.4.19
  * aardvark: fix missleading dns disabled log
  * firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
  * docs: fix link to getting started
  * fix(deps): update rust crate serde to 1.0.164
  * netlink: fix incorrect info log for del_route
  * dhcp-proxy: apply new ip address/gateway
  * test-dhcp: fix broekn has_ip() check
  * dhcp-proxy: actually implement renewing leases
  * dhcp-proxy: simplify code
  * dhcp-proxy: drop macaddr dependency
  * dhcp-proxy: remove some unused traits
  * fix(deps): update rust crate zbus to 3.13.1
  * fix(deps): update rust crate clap to 4.3.2
  * chore(deps): update rust crate once_cell to 1.18.0
  * fix(deps): update rust crate url to 2.4.0
  * fix(deps): update rust crate clap to 4.3.1
  * chore(deps): update dependency containers/automation_images to v20230601
  * chore(deps): update rust crate chrono to 0.4.26
  * chore(deps): update rust crate chrono to 0.4.25
  * fix(deps): update rust crate log to 0.4.18
  * chore(deps): update rust crate once_cell to 1.17.2
  * macvlan: add bclim option
  * parse_option(): return option instead of default
  * add no_default_gateway option
  * fix(deps): update rust crate clap to 4.3.0
  * chore(deps): update dependency containers/automation_images to v20230517
  * fix(deps): update rust crate serde to 1.0.163
  * Add ability to add static route
  * fix(deps): update rust crate serde to 1.0.162
  * Cirrus: Update fedora name to match image
  * fix(deps): update rust crate clap to 4.2.7
  * chore(deps): update dependency containers/automation_images to v20230426
  * correct typo in Makefile
  * simplify path printing
  * fix(deps): update rust crate tokio to 1.28
  * aardvark-dns pid: return better errors
  * fix comment in Subnet definition
  * aardvark: no error when aardvark config is not there
  * fix(deps): update rust crate zbus to 3.12.0
  * fix(deps): update rust crate clap to 4.2.4
  * fix(deps): update rust crate clap to 4.2.2
  * fix(deps): update rust crate serde_json to 1.0.96
  * update clap to v4
  * fix(deps): update rust crate serde to 1.0.160
  * bump to v1.7.0-dev

  * Changes in version 1.6.0:

  * dhcp-proxy: fix typo for --activity-timeout

  * chore(deps): update dependency containers/automation_images to v20230405
  * dhcp-proxy: use better error when connection fails
  * add documentation for netavark plugins
  * add stderr example plugin to test stderr passthrough
  * add netavark plugin driver
  * add example error plugin
  * add host-device example plugin
  * plugin: add simple plugin interface
  * netlink: add dump_addresses
  * netlink: add set_link_ns
  * dhcp-proxy: correctly exit > 0 on errors
  * fix(deps): update rust crate tonic to 0.9
  * fix(deps): update rust crate mozim to 0.2.2
  * fix(deps): update rust crate serde to 1.0.159
  * fix(deps): update rust crate netlink-sys to 0.8.5
  * dhcp-proxy: create socket directory only when used
  * dhcp-proxy: do not remove socket when running under systemd
  * Makefile: netavark-dhcp-proxy.service use correct path
  * fix(deps): update rust crate http to 0.2.9
  * chore(deps): update rust crate once_cell to 1.17.1
  * fix(deps): update rust-futures monorepo to 0.3.28
  * fix(deps): update rust crate serde_json to 1.0.95
  * chore(deps): update dependency containers/automation_images to v20230330
  * Disable Dependabot in favor of Renovate
  * chore(deps): update rust crate chrono to 0.4.24
  * build(deps): bump ipnet from 2.7.1 to 2.7.2
  * build(deps): bump serde from 1.0.158 to 1.0.159
  * build(deps): bump serde_json from 1.0.94 to 1.0.95
  * update,main: dont write empty space when no network_dns_servers is given
  * fix(deps): update rust crate tokio to 1.27
  * Quit Leasing when Client disconnects
  * build(deps): bump mozim from 0.2.1 to 0.2.2
  * iptables: fix incorrect debug statement
  * build(deps): bump serde from 1.0.156 to 1.0.158
  * iptables: port fw handle wildcard address correctly
  * chore(deps): update dependency containers/automation_images to v20230320
  * build(deps): bump zbus from 3.11.0 to 3.11.1
  * build(deps): bump anyhow from 1.0.69 to 1.0.70
  * [CI:BUILD] Packit: trigger builds on commit to main branch
  * Cirrus: Invalidate v2 bin cache
  * Include Systemd Files in RPM Package
  * Cirrus: Fix success failing on artifact extraction
  * fix lint issue with new rust version 1.68
  * Cirrus: Update to newer CI VM images
  * build(deps): bump serde from 1.0.152 to 1.0.156
  * combine dhcp-proxy and netavark into one binary
  * update: should allow empty network_dns_servers
  * build(deps): bump libc from 0.2.139 to 0.2.140
  * fix aarch64 ncat flake
  * update to mozim 0.2.1
  * build(deps): bump zbus from 3.10.0 to 3.11.0
  * packit: Update build release tag correctly
  * test: move proto option into run_nc_test()
  * test: add netns pid param to port checks
  * test: import podman code to check for ports
  * cirrus.yaml: add new binaries in art_prep_script
  * fix netavark-dhcp-proxy binary in system unit
  * import netavark-proxy-dhcp tests
  * add build_proxy_client target
  * add netavark-dhcp-proxy to rpm
  * Fix dhcp-proxy build
  * Merge nv-dhcp-proxy into nv
  * fix default route metric test name
  * build(deps): bump tokio from 1.25.0 to 1.26.0
  * Support none parameter on NETAVARK_FW
  * build(deps): bump anyhow from 1.0.68 to 1.0.69
  * Fix typos
  * update netlink-packet-{route,core} to 0.15 and 0.5
  * build(deps): bump serde_json from 1.0.92 to 1.0.93
  * build(deps): bump zbus from 3.8.0 to 3.10.0
  * [CI:BUILD] Packit: initial enablement
  * Allow custom cargo binary path
  * build(deps): bump serde_json from 1.0.91 to 1.0.92
  * Cirrus: Reduce requested CPUs for compile-tasks
  * bump to version 1.0.6-dev
  * build(deps): bump netlink-sys from 0.8.3 to 0.8.4
  * Add renovate.json5

  * Added aardvark-dns as dependency requirement for netavark

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * openSUSE Leap 15.5  
    zypper in -t patch SUSE-2024-718=1 openSUSE-SLE-15.5-2024-718=1

  * SUSE Linux Enterprise Micro 5.5  
    zypper in -t patch SUSE-SLE-Micro-5.5-2024-718=1

  * Containers Module 15-SP5  
    zypper in -t patch SUSE-SLE-Module-Containers-15-SP5-2024-718=1

## Package List:

  * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)
    * netavark-debuginfo-1.10.2-150500.3.3.3
    * netavark-1.10.2-150500.3.3.3
    * aardvark-dns-1.10.0-150500.3.3.1
    * aardvark-dns-debuginfo-1.10.0-150500.3.3.1
  * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64)
    * netavark-debuginfo-1.10.2-150500.3.3.3
    * netavark-1.10.2-150500.3.3.3
    * aardvark-dns-1.10.0-150500.3.3.1
    * aardvark-dns-debuginfo-1.10.0-150500.3.3.1
  * Containers Module 15-SP5 (aarch64 ppc64le s390x x86_64)
    * netavark-debuginfo-1.10.2-150500.3.3.3
    * netavark-1.10.2-150500.3.3.3
    * aardvark-dns-1.10.0-150500.3.3.1
    * aardvark-dns-debuginfo-1.10.0-150500.3.3.1

## References:

  * https://jira.suse.com/browse/PED-7577

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20240229/887bfd91/attachment.htm>


More information about the sle-updates mailing list