SUSE-RU-2025:20262-1: moderate: Recommended update for aardvark-dns, netavark

SLE-UPDATES null at suse.de
Wed Jun 4 07:34:39 UTC 2025



# Recommended update for aardvark-dns, netavark

Announcement ID: SUSE-RU-2025:20262-1  
Release Date: 2025-04-17T11:21:25Z  
Rating: moderate  
References:

  * bsc#1224167
  * bsc#1234660
  * bsc#1236567

  
Affected Products:

  * SUSE Linux Micro 6.1

  
  
An update that has three fixes can now be installed.

## Description:

This update for aardvark-dns, netavark fixes the following issues:

aardvark-dns:

  * Update to version 1.12.2:

    * coredns: work on tcp requests concurrently
    * tcp: add timeout to connection
    * cirrus: update branch names
    * Change av cargo categories
    * config: ignore enoent errors while reading configs
    * run cargo update
    * update upsteam resolvers on each refresh
    * fix(deps): update rust crate syslog to v7
    * fix(deps): update rust crate tokio to 1.39.2
    * add tcp support for forwarding (bsc#1234660)
    * add tcp listening support
    * test: add new test to check for startup error
    * return bind error to caller on first start
    * add our own error type and use it over anyhow
    * server: use anyhow to wrap parse_configs error
    * server: split out main loop into new function
    * main: remove aardvark-dns error prefix
    * coredns: remove unnecessary try_join! call
    * coredns: drop pointless name var
    * serve: read nameservers once
    * replace signal-hook with tokio::signal
    * serve: fix broken error logging
    * server: improve parent <-> child error handling
    * add some basic perf check script
    * fix(deps): update rust crate tokio to 1.39.0
    * coredns: create reply_ip() function
    * coredns: match dns type explicitly
    * server: use only one tokio runtime
    * coredns: improve indentation for process_message()
    * coredns: move upstream resolvers detection later
    * coredns: do not clone sender
    * read AARDVARK_NO_PROXY once
    * coredns: move main code out of select!
    * coredns: fix "name" naming
    * coredns: remove unused forward_addr/port
    * coredns: fix handling of dns search domain
    * coredns: rework PTR lookup flow
    * fix(deps): update rust crate tokio to 1.38.1
    * [skip-ci] TMT: Reorg upstream tests for downstream reusability
    * [skip-ci] Packit: use `packages: [aardvark-dns-fedora]` for podman-next builds
    * Be sure to have at least Epoch 2 to preserve upgrade path in c10s.
    * fix(deps): update rust crate log to 0.4.22
    * [CI:BUILD] rpm: Update Rust macro usage
    * fix(deps): update rust crate tokio to 1.38.0
    * Bump to 1.12.0-dev
  * Remove redundant source: cargo_config

  * Update to version 1.11.0:
    * Release v1.11.0
    * v1.11.0 release notes
    * run cargo update
    * chore(deps): update dependency containers/automation_images to v20240529
    * Internal networks cannot make external DNS requests
    * fix(deps): update rust crate anyhow to 1.0.86
    * fix(deps): update rust crate nix to 0.29.0
    * [skip-ci] RPM: use default __cargo macro across all envs
    * chore(deps): update dependency containers/automation_images to v20240513
    * fix(deps): update rust crate anyhow to 1.0.83
    * [skip-ci] Packit: separate `packages` key for rhel jobs
    * fix(deps): update rust crate libc to 0.2.154
    * [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
    * [skip-ci] Packit: Remove EL8 jobs
    * fix(deps): update rust crate syslog to ^6.1.1
    * fix reverse ipv6 lookup test flake
    * fix(deps): update hickory-dns monorepo to 0.24.1
    * chore(deps): update rust crate chrono to 0.4.38
    * Don't tear down all server threads on SIGHUP (bsc#1224167)
    * fix(deps): update rust crate anyhow to 1.0.82
    * fix(deps): update rust crate tokio to 1.37.0
    * Update to nix-0.28.0
    * update chrono package
    * chore(deps): update dependency containers/automation_images to v20240320
    * fix(deps): update rust crate anyhow to 1.0.81
    * tests: check queried domain name in reverse lookup tests
    * fix: set name for answers in reverse lookups
    * chore: fix typo in runner script
    * chore: fix log message when doing reverse lookup
    * fix(deps): update rust crate log to 0.4.21
    * fix(deps): update rust crate anyhow to 1.0.80
    * chore(deps): update rust crate chrono to 0.4.34
    * fix(deps): update rust crate async-broadcast to 0.7.0
    * fix(deps): update rust crate tokio to 1.36.0
    * [CI:DOCS] Packit: disable bodhi tasks
    * chore(deps): update rust crate chrono to 0.4.33
    * Bump to 1.11.0-dev

netavark:

  * Use recommended way to require latest rust—require cargo.
  * Update to version 1.12.2:

    * Release v1.12.2
    * Release notes for 1.12.2
    * fix new rust 1.80 lint issues
    * silence new rust 1.80 warnings
    * aardvark: on start failure delete entries again
    * iptables: make dns rules cover tcp as well
    * nftables: make dns rules cover tcp as well
    * Release v1.12.1
    * Update release notes for v1.12.1
    * Change nv cargo categories
    * Bump to 1.13.0-dev
    * Release 1.12
    * Release Notes for 1.12
    * run cargo update
    * rpm: use nftables as default for f41
    * fix(deps): update rust crate serde_json to 1.0.121
    * fix(deps): update rust crate tokio to 1.39.2
    * aardvark-dns: trim whitespaces from error text
    * fix(deps): update rust crate env_logger to 0.11.5
    * [skip-ci] RPM: handle iptables/nftables dependencies
    * fix aardvark-dns error handling
    * fix(deps): update rust crate tokio to 1.39.1
    * fix(deps): update rust crate env_logger to 0.11.4
    * fix(deps): update rust crate tokio to 1.38.1
    * update mozim to 0.2.4 (bsc#1236567)
    * fix(deps): update rust crate serde_json to 1.0.120
    * netavark: dhcp_proxy: use dns servers from dhcp lease
    * fix(deps): update rust crate serde_json to 1.0.119
    * fix(deps): update rust crate netlink-packet-route to 0.20.1
    * fix(deps): update rust crate log to 0.4.22
    * Fix Epoch so upgrade path is preserved from Fedora/RHEL.
    * test: add macvlan metric test
    * fix(deps): update rust crate serde_json to 1.0.118
    * fix(deps): update rust crate url to 2.5.2
    * fix(deps): update rust crate prost to 0.12.6
    * fix(deps): update rust crate url to 2.5.1
    * fix(deps): update rust crate iptables to 0.5.2
    * [CI:BUILD] rpm: Update Rust macro usage
    * fix(deps): update rust crate nftables to 0.4.1
    * fix(deps): update rust crate tokio to 1.38.0
    * Bump to 1.12.0-dev
  * Update to version 1.11.0:

    * Release v1.11.0
    * Update release notes for 1.11.0
    * update netlink-packet-route to 0.20.0
    * run cargo update
    * fix: remove extra / in make install and uninstall
    * chore(deps): update dependency containers/automation_images to v20240529
    * fix(deps): update rust crate nix to 0.29.0
    * fix(deps): update rust crate nispor to 1.2.19
    * fix(deps): update rust crate anyhow to 1.0.86
    * fix(deps): update rust crate anyhow to 1.0.85
    * [skip-ci] Packit: do not create dup jobs on podman-next
    * fix(deps): update rust crate anyhow to 1.0.84
    * [skip-ci] RPM: use default __cargo macro across all envs
    * [skip-ci] RPM: switch default firewall to nftables on EL10+
    * chore(deps): update dependency containers/automation_images to v20240513
    * Add conditional compilation of default firewall driver
    * fix(deps): update rust crate serde_json to 1.0.117
    * fix new clippy warnings
    * Update CI image to fedora 40
    * fix ncat sctp tests
    * fix(deps): update rust crate anyhow to 1.0.83
    * build(deps): bump h2 from 0.3.25 to 0.3.26
    * [skip-ci] Packit: distinct `-rhel` packages value
    * [skip-ci] Packit: enable c10s downstream sync
    * fix(deps): update rust crate libc to 0.2.154
    * fix(deps): update rust crate ipnet to 2.9.0
    * fix(deps): update rust crate tower to 0.4.13
    * fix(deps): update rust crate tokio-stream to 0.1.15
    * fix(deps): update rust crate prost to 0.12.4
    * fix(deps): update rust crate iptables to 0.5.1
    * [skip-ci] Packit: remove el8 jobs
    * fix(deps): update rust crate anyhow to 1.0.82
    * fix(deps): update rust crate serde to 1.0.199
    * Add suffix to Aardvark internal network filenames
    * fix port forward with strict RPF and multi networks
    * renovate: stop rebasing PRs automatically
    * chore(deps): update rust crate chrono to 0.4.38
    * fix(deps): update rust crate serde_json to 1.0.116
    * fix(deps): update rust crate netlink-sys to 0.8.6
    * nftables: only dump netavark table rules
    * update nftables to 0.4
    * fix aardvark-dns netns check
    * fix(deps): update rust crate tokio to 1.37
    * fix(deps): update rust crate netlink-packet-route to 0.19.0
    * Update to nix-0.28.0
    * fix(deps): update rust crate mozim to 0.2.3
    * fix(deps): update rust crate nispor to 1.2.18
    * Update chrono
    * fix(deps): update rust crate serde_json to 1.0.115
    * build(deps): bump mio from 0.8.9 to 0.8.11
    * [skip-ci] rpm: aardvark-dns is a hard dep across the board
    * Update Rust crate env_logger to 0.11.3
    * Update Rust crate serde to 1.0.197
    * Update Rust crate tempfile to 3.10.1
    * Update Rust crate log to 0.4.21
    * Update Rust crate zbus to 3.15.2
    * Update Rust crate serde_json to 1.0.114
    * Update Rust crate env_logger to 0.11.2
    * Update Rust crate chrono to 0.4.34
    * Update Rust crate tonic-build to 0.11
    * Update Rust crate tonic to 0.11
    * fix netavark update to not start a new aardvark-dns
    * Update Rust crate tempfile to 3.10.0
    * Update Rust crate zbus to 3.15.0
    * Update Rust crate tokio to 1.36
    * Update Rust crate chrono to 0.4.33
    * Do not perform network namespace detection on AV update
    * [CI:BUILD] Packit/rpm: fix aardvark-dns handling
    * Update Rust crate serde_json to 1.0.113
    * Update Rust crate serde_json to 1.0.112
    * Update Rust crate env_logger to 0.11.1
    * update README with nftables support
    * Bump to v1.11.0-dev
    * perf-netavark: accept fw driver as argument
    * perf-netavark: fix missing --config arg
  * Update to version 1.10.3:

    * v1.10.3
    * fix netavark update to not start a new aardvark-dns

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Micro 6.1  
    zypper in -t patch SUSE-SLE-Micro-6.1-64=1

## Package List:

  * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64)
    * netavark-1.12.2-slfo.1.1_1.1
    * aardvark-dns-1.12.2-slfo.1.1_1.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1224167
  * https://bugzilla.suse.com/show_bug.cgi?id=1234660
  * https://bugzilla.suse.com/show_bug.cgi?id=1236567

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20250604/44319a40/attachment.htm>


More information about the sle-updates mailing list