<div class="container">
<h1>Recommended update for iproute2</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2024:2172-1</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1204562">bsc#1204562</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-6820">jsc#PED-6820</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-6844">jsc#PED-6844</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/PED-8358">jsc#PED-8358</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">Basesystem Module 15-SP6</li>
<li class="list-group-item">openSUSE Leap 15.6</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP6</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that contains three features and has one fix can now be installed.</p>
<h2>Description:</h2>
<p>This update for iproute2 fixes the following issues:</p>
<p>iproute2 was updated to version 6.4 (jsc#PED-6820 jsc#PED-6844, jsc#PED-8358):</p>
<ul>
<li>Fixed display of bound but unconnected sockets (bsc#1204562)</li>
<li>
<p>Changes in version 6.4:</p>
</li>
<li>
<p>bridge: mdb: added underlay destination IP support, UDP
destination port support, destination VNI support, source VNI
support, outgoing interface support</p>
</li>
<li>
<p>macvlan: added the "bclim" parameter</p>
</li>
<li>
<p>Changes in version 6.3:</p>
</li>
<li>
<p>New release of iproute2 corresponding to the 6.3 kernel.
No large feature improvements only incremental improvements to
the bridge mdb support, mostly just bug fixes.</p>
</li>
<li>
<p>Changes in version 6.2:</p>
</li>
<li>
<p>f_flower: Introduce L2TPv3 support</p>
</li>
<li>bridge: fdb: Add support for locked FDB entries</li>
<li>bridge: link: Add MAC Authentication Bypass (MAB) support</li>
<li>ip: Support --json on <code>ip neigh get</code></li>
<li>
<p>tc: Add JSON output to tc-class</p>
</li>
<li>
<p>Changes in version 6.1:</p>
</li>
<li>
<p>man: ss.8: fix a typo</p>
</li>
<li>testsuite: fix build failure</li>
<li>genl: remove unused vars in Makefile</li>
<li>json: do not escape single quotes</li>
<li>ip-monitor: Do not error out when RTNLGRP_STATS is not available</li>
<li>ip-link: man: Document existence of netns argument in add command</li>
<li>macsec: add Extended Packet Number support</li>
<li>macsec: add user manual description for extended packet number feature</li>
<li>ip: xfrm: support "external" (<code>collect_md</code>) mode in xfrm interfaces</li>
<li>ip: xfrm: support adding xfrm metadata as lwtunnel info in routes</li>
<li>ip: add NLM_F_ECHO support</li>
<li>libnetlink: add offset for nl_dump_ext_ack_done</li>
<li>tc/tc_monitor: print netlink extack message</li>
<li>rtnetlink: add new function rtnl_echo_talk()</li>
<li>ip: fix return value for rtnl_talk failures</li>
<li>iplink_bridge: Add no_linklocal_learn option support</li>
<li>devlink: use dl_no_arg instead of checking dl_argc == 0</li>
<li>devlink: remove dl_argv_parse_put</li>
<li>mnlg: remove unnused mnlg_socket structure</li>
<li>utils: extract CTRL_ATTR_MAXATTR and save it</li>
<li>devlink: expose nested devlink for a line card object</li>
<li>devlink: load port-ifname map on demand</li>
<li>devlink: fix parallel flash notifications processing</li>
<li>devlink: move use_iec into struct dl</li>
<li>devlink: fix typo in variable name in ifname_map_cb()</li>
<li>devlink: load ifname map on demand from ifname_map_rev_lookup() as well</li>
<li>dcb: unblock mnl_socket_recvfrom if not message received</li>
<li>libnetlink: Fix memory leak in __rtnl_talk_iov()</li>
<li>tc_util: Fix no error return when large parent id used</li>
<li>tc_util: Change datatype for maj to avoid overflow issue</li>
<li>ss: man: add missing entries for MPTCP</li>
<li>ss: man: add missing entries for TIPC</li>
<li>ss: usage: add missing parameters</li>
<li>ss: re-add TIPC query support</li>
<li>devlink: Fix setting parent for 'rate add'</li>
<li>link: display 'allmulti' counter</li>
<li>seg6: add support for flavors in SRv6 End* behaviors</li>
<li>tc: ct: Fix invalid pointer dereference</li>
<li>uapi: update from 6.1 pre rc1</li>
<li>u32: fix json formatting of flowid</li>
<li>tc_stab: remove dead code</li>
<li>uapi: update for in.h and ip.h</li>
<li>remove #if 0 code</li>
<li>tc: add json support to size table</li>
<li>tc: put size table options in json object</li>
<li>tc/basic: fix json output filter</li>
<li>iplink: support JSON in MPLS output</li>
<li>tc: print errors on stderr</li>
<li>ip: print mpls errors on stderr</li>
<li>tc: make prefix const</li>
<li>man: add missing tc class show</li>
<li>iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays</li>
<li>
<p>ip link: add sub-command to view and change DSA conduit interface</p>
</li>
<li>
<p>Changes in version 6.0:</p>
</li>
<li>
<p>ipstats: Add param.h for musl</p>
</li>
<li>Update kernel headers</li>
<li>libbpf: add xdp program name support</li>
<li>iplink: bond_slave: add per port prio support</li>
<li>seg6: add support for SRv6 Headend Reduced Encapsulation</li>
<li>lib: Introduce ppp protocols</li>
<li>
<p>f_flower: Introduce PPPoE support</p>
</li>
<li>
<p>Changes in version 5.19:</p>
</li>
<li>
<p>ip/iplink_virt_wifi: add support for virt_wifi</p>
</li>
<li>Update kernel headers</li>
<li>libnetlink: Add filtering to rtnl_statsdump_req_filter()</li>
<li>ipstats: Add a "set" command</li>
<li>ipstats: Add a group "link"</li>
<li>libbpf: Use bpf_object__load instead of bpf_object__load_xattr</li>
<li>uapi: change name for zerocopy sendfile in tls</li>
<li>bridge: vxlan device vnifilter support</li>
<li>
<p>f_flower: Add num of vlans parameter</p>
</li>
<li>
<p>Changes in version 5.18:</p>
</li>
<li>
<p>The build issues with libbpf should be fixed now.</p>
</li>
<li>Building with clang is now supported.</li>
<li>
<p>There are still some warnings with gcc-12 that will need to be
fixed in the upstream kernel headers.</p>
</li>
<li>
<p>Changes in version 5.17:</p>
</li>
<li>
<p>lib/fs: fix memory leak in get_task_name()</p>
</li>
<li>bridge: Remove vlan listing from <code>bridge link</code></li>
<li>bond: add arp_missed_max option</li>
<li>libnetlink: fix socket leak in rtnl_open_byproto()</li>
<li>dcb: Fix error reporting when accessing "dcb app"</li>
<li>tc_util: Fix parsing action control with space and slash</li>
<li>lib: fix ax25.h include for musl</li>
<li>uapi: add missing rose and ax25 files</li>
<li>rdma: Fix res_print_uint() and add res_print_u64()</li>
<li>
<p>tc: Add support for ce_threshold_value/mask in fq_codel</p>
</li>
<li>
<p>Add tmpfiles.d conf for /run/netns</p>
</li>
<li>
<p>Changes in version 5.16:</p>
</li>
<li>
<p>devlink: Fix cmd_dev_param_set() to check configuration mode</p>
</li>
<li>ip: add AMT support</li>
<li>iplink_can: fix configuration ranges in print_usage() and add
unit</li>
<li>tc: flower: Fix buffer overflow on large labels</li>
<li>ip/ipnexthop: fix unsigned overflow in parse_nh_group_type_res()</li>
<li>tc/m_vlan: fix print_vlan() conditional on TCA_VLAN_ACT_PUSH_ETH</li>
<li>
<p>iplink_can: add new CAN FD bittiming parameters:
Transmitter Delay Compensation (TDC)</p>
</li>
<li>
<p>Changes in version 5.15:</p>
</li>
<li>
<p>lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists</p>
</li>
<li>man: devlink-port: fix the devlink port add synopsis</li>
<li>man: devlink-port: fix pfnum for devlink port add</li>
<li>iptuntap: fix multi-queue flag display</li>
<li>mptcp: unbreak JSON endpoint list</li>
<li>ipneigh: add support to print brief output of neigh cache in
tabular format</li>
<li>ip/bond: add LACP active support</li>
<li>ip/tunnel: always print all known attributes</li>
<li>Add, show, link, remove IOAM namespaces and schemas</li>
<li>New IOAM6 encap type for routes</li>
<li>tc/skbmod: Introduce SKBMOD_F_ECN option</li>
<li>tc/f_flower: fix port range parsing</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
openSUSE Leap 15.6
<br/>
<code>zypper in -t patch SUSE-2024-2172=1 openSUSE-SLE-15.6-2024-2172=1</code>
</li>
<li class="list-group-item">
Basesystem Module 15-SP6
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2172=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
<ul>
<li>iproute2-arpd-debuginfo-6.4-150600.7.3.1</li>
<li>libnetlink-devel-6.4-150600.7.3.1</li>
<li>iproute2-debugsource-6.4-150600.7.3.1</li>
<li>iproute2-arpd-6.4-150600.7.3.1</li>
<li>iproute2-6.4-150600.7.3.1</li>
<li>iproute2-bash-completion-6.4-150600.7.3.1</li>
<li>iproute2-debuginfo-6.4-150600.7.3.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64)
<ul>
<li>iproute2-arpd-debuginfo-6.4-150600.7.3.1</li>
<li>libnetlink-devel-6.4-150600.7.3.1</li>
<li>iproute2-debugsource-6.4-150600.7.3.1</li>
<li>iproute2-arpd-6.4-150600.7.3.1</li>
<li>iproute2-6.4-150600.7.3.1</li>
<li>iproute2-bash-completion-6.4-150600.7.3.1</li>
<li>iproute2-debuginfo-6.4-150600.7.3.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1204562">https://bugzilla.suse.com/show_bug.cgi?id=1204562</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-6820">https://jira.suse.com/browse/PED-6820</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-6844">https://jira.suse.com/browse/PED-6844</a>
</li>
<li>
<a href="https://jira.suse.com/browse/PED-8358">https://jira.suse.com/browse/PED-8358</a>
</li>
</ul>
</div>