# changelog

author: Michael Santana <msantana@redhat.com> - 3.4.0-1
changelog:
  - redhat: Use official 3.4.0 tarball [RH git: fc198c51c1]
      Signed-off-by: Michael Santana <msantana@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.4.0-2
changelog:
  - Merging upstream branch-3.4 [RH git: 0f5878ad5e]
      Commit list:
      32ff65ac6f docs: Fix argument formatting in ovs-appctl(8) man page.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.4.0-3
changelog:
  - Merging upstream branch-3.4 [RH git: 7e8c8356c9]
      Commit list:
      a67c12d515 userspace: Correctly set ip offload flag in native tunneling.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.4.0-4
changelog:
  - Merging upstream branch-3.4 [RH git: 743a772569]
      Commit list:
      76ba41b5c2 vconn: Always properly free flow stats reply.
      fa840997f5 mcast-snooping: Properly check group_get_lru return code.
      64cb905077 ovsdb-idl: Fix IDL memory leak.
      9e9433ec5b ofproto/bond: Preserve active bond member over restarts.
      05b7520826 ofproto-dpif-upcall: Avoid stale ukeys leaks.
      a91553ef0e ci: Use previous sarif-tools release due to issue in latest release.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.4.0-5
changelog:
  - Merging upstream branch-3.4 [RH git: 17b80cd265]
      Commit list:
      7d074979f3 github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.4.0-6
changelog:
  - Merging upstream branch-3.4 [RH git: 0037d59a9b]
      Commit list:
      e05a769314 selinux: Update policy file.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.4.0-7
changelog:
  - Merging upstream branch-3.4 [RH git: d05a073041]
      Commit list:
      d17dbccf03 netdev-dpdk: Disable outer udp checksum offload for txgbe driver.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.4.0-8
changelog:
  - Merging upstream branch-3.4 [RH git: af82ab5cba]
      Commit list:
      f6329c4280 Revert "ci: Use sarif-tools v3.0.1 due to issues in earlier versions."
      b7a277b732 ci: Use sarif-tools v3.0.1 due to issues in earlier versions.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.4.0-9
changelog:
  - Merging upstream branch-3.4 [RH git: fd0f5ba088]
      Commit list:
      a15ce086d4 ofproto-dpif: Improve load balancing in dp_hash select groups. (FDP-826)


author: Michael Santana <msantana@redhat.com> - 3.5.0-0.3
changelog:
  - Add ovs-flowviz files to spec template [RH git: 439410825e]
      Signed-off-by: Michael Santana <msantana@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-0.4
changelog:
  - Merging dpdk subtree [RH git: aeea0401b8]
      Commit list:
      f2eea2f37a version: 24.11.1
      fdf13ea6fe net/virtio: fix Rx checksum calculation


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-0.5
changelog:
  - Merging upstream branch-3.5 [RH git: 0b061819d3]
      Commit list:
      005e258920 Prepare for 3.5.0.
      2276c3a2c6 userspace: Support GRE TSO.
      d68b73e2f1 docs: Update userspace TSO tunnel fallback documentation.
      a4efa07881 docs: Add tunnel support to TSO GRE documentation.
      91fc51106c route-table: Support parsing multipath routes.
      50f7d2082b route-table: Export route table sync functions.
      da58f0291e route-table: Use correct type for nlmsg_type.
      18aa16831f route-table: Rename route_data mark to rta_mark.
      ca8f5af37d route-table: Rename route_data local to rtn_local.
      a75eb54643 route-table: Store original value for rtm_dst_len.
      e573adeecb route-table: Use callback for handling route msgs.
      e15910ddc0 route-table: Use RTA_TABLE for route table filter.
      9d9a99d157 route-table: Support parsing RTA_VIA attribute.
      6f9196a3d0 route-table: Store nexthops in linked list.
      583dd0315c route-table: Harmonize log msgs with code base.
      910bc81e66 route-table: Rename static nln callback buffer.
      71785737de route-table: Split header and attribute parsing.
      78d10bdc31 route-table: Store route protocol.
      10ae7983e8 route-table: Store route priority.
      903989bdb4 route-table: Store route table ID.
      e67f317ef1 ovs-ctl: Fix inability to set custom options for ovs-monitor-ipsec.
      fe1d48dba2 rhel, debian: Add missing restart policy to ipsec service.
      656c95e133 rhel, debian: Fix systemd monitoring wrong pid for ovs-monitor-ipsec.
      867093679b dpif-netdev: Modify code comments for function parse_tcp_flags.
      c3f4d9fe54 ipf: Fix the over-sized reassembly.
      367e0fff23 debian: Let *-ctl handle runtime directory.
      3f19558e73 debian: Use PIDFile with systemd.
      439e0bf2f8 debian: Add X-Python3-Version stanza.
      4ce47bbccf debian: Move ovs-flowviz to openvswitch-common.
      96d5bcf991 debian: Drop hard Python dep where appropriate.
      f64e94d8d6 debian: Drop shlibs:Depends macro for -ipsec.
      0ff25dfca5 debian: Drop python3:Depends macro for -vtep.
      6a1a5f2eec python: Allow ovs-flowviz to run without graphviz.
      e4193663af debian: Use pybuild to handle OVS Python module.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-0.6
changelog:
  - Merging dpdk subtree [RH git: c4a0bf97c2]
      Commit list:
      f4db1f3496 vhost: reset packets count when not ready (FDP-1087)


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-0.7
changelog:
  - Merging upstream branch-3.5 [RH git: 7ae9a1a925]
      Commit list:
      09f3b32a31 ofp-ct: Add missing struct declaration.


author: Flavio Leitner <fbl@redhat.com> - 3.5.0-0.8
changelog:
  - Use pre-release prefix in the changelog. [RH git: c5d1126bd8]
      Fix pkgtool to use the pre-release prefix in the
      package changelog.
      
      Signed-off-by: Flavio Leitner <fbl@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-0.9
changelog:
  - Merging upstream branch-3.5 [RH git: 1627e12580]
      Commit list:
      6e708a0433 route-table: Fix potential memory leak.
      ee9b72178e route-table: Avoid potential NULL ptr dereference.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-0.10
changelog:
  - Merging upstream branch-3.5 [RH git: 11bf98a1d4]
      Commit list:
      84768a4b05 route-table: Use ofpbuf_use_const() for multipath attributes.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-0.11
changelog:
  - Merging upstream branch-3.5 [RH git: dcbeed9917]
      Commit list:
      c0c61e12f6 ofproto-macros.at: Fix hex matching in the strip_recird() macro.


author: Timothy Redaelli <tredaelli@redhat.com> - 3.5.0-2
changelog:
  - Add 'redhat/' from commit 'a57d7e61afd486bb49c0298ba6db7100b746669f' [RH git: 9037a1c926]
      git-subtree-dir: redhat
      git-subtree-mainline: 4f55f49a25ad2f6be49b62301a486c9d6cf9cf28
      git-subtree-split: a57d7e61afd486bb49c0298ba6db7100b746669f


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-5
changelog:
  - Merging redhat subtree [RH git: 08d09fdb13]
      Commit list:
      48fbd3b1cd Fix patch version management


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.0-6
changelog:
  - Merging upstream branch-3.5 [RH git: af1bdb9d4d]
      Commit list:
      490d0377d9 ofproto-dpif-xlate: Fix source IP lookup for non-bridge ports.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.2-60
changelog:
  - Merging upstream branch-3.5 [RH git: edc37871f3]
      Commit list:
      f7ea5ddae9 cirrus: Use FreeBSD release images instead of stable snapshots.
      13c2029dd6 automake: Don't install the libopenvswitchavx512.
      d91dfa0f27 fedora: Fix package install on Fedora 43.
      d834dd928e ipsec: libreswan: Consider active only when child SA is established. ()
      f3d0515c89 ipsec: libreswan: Silence warning about overriding auto=route in v5.3.
      0ef859800c ipsec: libreswan: Fix warning for obsolete keyingtries in v5.
      a28a200bd3 system-ipsec.at: Use natural sorting for SA list.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.2-61
changelog:
  - Merging upstream branch-3.5 [RH git: ccd2296e7f]
      Commit list:
      adb2fe34f7 ofproto-dpif-xlate: Avoid mirroring on recirculation.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.2-62
changelog:
  - Merging upstream branch-3.5 [RH git: 56d5ebd7a0]
      Commit list:
      a18cda1676 treewide: Fix discarded-qualifers warnings.
      02519c10df ovsdb-server: Fix relay remotes string check.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.2-63
changelog:
  - Merging upstream branch-3.5 [RH git: bd6def7e8a]
      Commit list:
      a944383a4f rhel: Avoid warning about missing .la with Fedora spec.
      ef2856056b rhel: Remove kernel mentions from the Fedora spec.
      d537176765 rhel: Don't ship network scripts on RHEL 9+ and Fedora 41+.
      302716a07b rhel: Don't build network scripts package on RHEL 9+ with Fedora spec.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.3-0
changelog:
  - Merging upstream branch-3.5 [RH git: ee76a74393]
      Commit list:
      6c499146e2 Prepare for 3.5.4.
      f65acb885a Set release date for 3.5.3.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.3-1
changelog:
  - Merging upstream branch-3.5 [RH git: 0473c104da]
      Commit list:
      e6e830708f ovsdb: raft: Don't grant a pre-vote to a server that is behind. ()
      caaa2633d0 ovsdb-cluster.at: Test disruptive server with outdated log and term.
      cda6411144 netdev-linux: Fix IFLA_IF_NETNSID value.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.3-2
changelog:
  - Merging redhat subtree [RH git: 06d84abe0e]
      Commit list:
      8fac66e3f7 pkgtool: fix changelog release mismatch for point releases


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.3-3
changelog:
  - Merging upstream branch-3.5 [RH git: 74e5eaf70f]
      Commit list:
      4eb726ba18 netdev-dpdk: Fix vhost_driver_flags data race in destruct.
      fc9442d88f coverage: Fix data race when reading idx_count in coverage_read().
      755786fcea packets: Validate ND option length in packet_set_nd().
      4448338b5c github: Fix potential 32-bit package installations.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.3-4
changelog:
  - Merging upstream branch-3.5 [RH git: ee9e868c55]
      Commit list:
      8dbac429af dpctl: Fix memory leak in ipf-get-status command.


author: Open vSwitch CI <ovs-ci@redhat.com> - 3.5.3-5
changelog:
  - Merging redhat subtree [RH git: 3a5d18bea0]
      Commit list:
      41662c2205 redhat: fix misc bugs found during security review
      ffc5dd582d redhat: update README.rst and README.dpdk
      0e5fa41626 pkgtool: fix changelog history and release numbering for point releases


author: Xavier Simonart <xsimonar@redhat.com> - 24.09.0-34
changelog:
  - ovn-controller: Fix potential assert when exiting.
  [Upstream: 8488c3c0aff73d1037a4af205ac3ba2ed22106a3]


author: Ales Musil <amusil@redhat.com> - 24.09.0-35
changelog:
  - physical: Prevent wrong FDB to be learned with multichassis port. (#FDP-620)
  [Upstream: 8b3e276e228407068e0a9e72ad3e02969da2de1d]


author: Ales Musil <amusil@redhat.com> - 24.09.0-36
changelog:
  - controller: Avoid quadratic complexity for multi-chassis ports.
  [Upstream: b3e47dc70ad6bd2f92ffbe64a39ae4d98c0e8398]


author: Rosemarie O'Riorden <rosemarie@redhat.com> - 24.09.0-37
changelog:
  - northd: Respect --ecmp-symmetric-reply for single routes. (#FDP-786)
  [Upstream: 7b00627433f3ee066cf6a5b727fec614c5e6eb77]


author: Ales Musil <amusil@redhat.com> - 24.09.0-39
changelog:
  - northd, controller: Use ct_next to get the CT state for direct SNAT. (#FDP-744)
  [Upstream: 2a60ba94f99486f1eb44134e693a8393059d4869]


author: Mohammad Heib <mheib@redhat.com> - 24.09.0-40
changelog:
  - controller: Container lport install flows in MAIN chassis only. (#FDP-772)
  [Upstream: 809d4aac64c4343f3bf845f2df497be2af6cba26]


author: Xavier Simonart <xsimonar@redhat.com> - 24.09.0-41
changelog:
  - ovn-ic: Fix potential segmentation violation.
  [Upstream: 0611308a7a2e58911a18d974b1e8c7b2d8f0541f]


author: Naveen Yerramneni <naveen.yerramneni@nutanix.com> - 24.09.1-5
changelog:
  - controller: Fix "use after free" issue in statctrl_run().
  [Upstream: 8eaa7d599138b24e18a18cf8c2435da4fe34a293]


author: Dumitru Ceara <dceara@redhat.com> - 24.09.1-6
changelog:
  - pinctrl: Use correct map size in pinctrl_handle_put_fdb().
  [Upstream: 33a6ae53f444e7e6d79fc6bad839e8d7ddeb1b31]


author: Dumitru Ceara <dceara@redhat.com> - 24.09.1-7
changelog:
  - mac-cache: Properly handle deletion of SB mac_bindings. (#FDP-906)
  [Upstream: 8579859f516dfa07ee38e32cdebe6930d1dd3cad]


author: Dumitru Ceara <dceara@redhat.com> - 24.09.1-8
changelog:
  - pinctrl: Skip deleted mac bindings in run_buffered_binding().
  [Upstream: ea353473209cadb551f4b84793fdddaf6b7c3595]


author: Dumitru Ceara <dceara@redhat.com> - 24.09.1-9
changelog:
  - pinctrl: Skip non-local mac bindings in run_buffered_binding().
  [Upstream: 6448f5e364dc4df016f965cfd9345aed66e30dea]


author: Xavier Simonart <xsimonar@redhat.com> - 24.09.1-10
changelog:
  - Revert "controller: Properly handle localnet flows in I+P.". (#FDP-926)
  [Upstream: e090b4ee942b65d7ffed4d1a20b6dd815625cd82]


author: Ilya Maximets <i.maximets@ovn.org> - 24.09.2-6
changelog:
  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes. (#FDP-1024)
  [Upstream: 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]


author: Xavier Simonart <xsimonar@redhat.com> - 24.09.2-7
changelog:
  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 24.09.2-8
changelog:
  - northd: Trigger a full recompute if lb neigh_mode option is updated. (#FDP-1054)
  [Upstream: 68c84b32977a630b6ddd33da327290309dc76f71]


author: Ales Musil <amusil@redhat.com> - 24.09.2-9
changelog:
  - northd: Do not attempt to install LS flows for LR IGMP group.
  [Upstream: 97d908128c240f25b0ba92016584c228c7db76d8]


author: Ilya Maximets <i.maximets@ovn.org> - 24.09.2-10
changelog:
  - tests: Fix incorrect invocations of send_garp.
  [Upstream: 09d11179296ed341a4c38e010580092d58779455]


author: Ilya Maximets <i.maximets@ovn.org> - 24.09.2-11
changelog:
  - tests: Fix use of bash arrays in MAC binding tests.
  [Upstream: dd3848e81442971125fa29ce4c036957b2e3e5ca]


author: Ilya Maximets <i.maximets@ovn.org> - 24.09.2-12
changelog:
  - mac-cache: Fix MAC binding entry lookup for timestamp refresh. (#FDP-1131)
  [Upstream: e574725207d74cbe5154e5e3456610a8bff2ff80]


author: Ilya Maximets <i.maximets@ovn.org> - 24.09.2-13
changelog:
  - mac-cache: Fix expiration of active MAC binding due to skipped update. (#FDP-1130)
  [Upstream: bcdc178176d3caec0271f849f429b7d2123c28c5]


author: Ilya Maximets <i.maximets@ovn.org> - 24.09.2-14
changelog:
  - mac-cache: Fix expiration of active FDB entry due to skipped update. (#FDP-1132)
  [Upstream: aac52632d011a998872925fae98f67bc53f7c0a3]


author: Ales Musil <amusil@redhat.com> - 24.09.2-15
changelog:
  - controller: Omit alert for FDB and MAC binding timestamp.
  [Upstream: 2f1279e9b055fdadde464401c1ba8f14f94a7a88]


author: Rosemarie O'Riorden <rosemarie@redhat.com> - 24.09.2-65
changelog:
  - ovn-nb: Improve docs for nbctl --template lb-add. (#FDP-1066)
  [Upstream: cf97cd9152221e0631d97e0794e812ae427a9000]


author: Ales Musil <amusil@redhat.com> - 24.09.2-67
changelog:
  - inc-engine: Adjust the force recompute API. (#FDP-753)
  [Upstream: f0d9df0259f29b817d345f4b77cd1548618225f8]


author: Ales Musil <amusil@redhat.com> - 24.09.2-68
changelog:
  - controller: Remove only commited virtual port binding requests.
  [Upstream: a99aa6e2f08c4d34194fae44e0f3068dd8eaa700]


author: Ales Musil <amusil@redhat.com> - 24.09.2-69
changelog:
  - contoller, northd: Limit number of claims for virtual ports. (#FDP-443)
  [Upstream: c2d34d96ba24dea60d843d633b3794ef3be11146]


author: Mark Michelson <mmichels@redhat.com> - 24.09.2-70
changelog:
  - northd: Set REGBIT_CONNTRACK_COMMIT earlier. (#FDP-1321)
  [Upstream: f8d6d7b46322d83bbaaacb6970ff15085dd31fcc]


author: Lucas Vargas Dias \(Dev - MGC - SDN\) <lucas.vdias@luizalabs.com> - 24.09.2-73
changelog:
  - ic: Fix lrp and lsp orphan route learn or advertise.
  [Upstream: 27e70cd2c3badc2ffffbdbc6eea764876a350524]


author: Xavier Simonart <xsimonar@redhat.com> - 24.09.3-14
changelog:
  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: 724b82141dd253e5d08450b8aa8a5d20f5cd7db6]


author: Xavier Simonart <xsimonar@redhat.com> - 24.09.3-15
changelog:
  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 2890ab2e01377c43bdb0b82d54580eda8f529be2]


author: Xavier Simonart <xsimonar@redhat.com> - 24.09.3-16
changelog:
  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: c971e4cebbb093bc55647277025705017985f840]


author: Xavier Simonart <xsimonar@redhat.com> - 24.09.3-18
changelog:
  - tests: Remove unused commands from mac-binding test.
  [Upstream: 0856f6ae3c556008e13c2479602d11a167e67e96]


author: Ilya Maximets <i.maximets@ovn.org> - 24.09.3-22
changelog:
  - logical-fields: Fix IPv6 dp flow explosion caused by ip6.mcast_rsvd. (#FDP-1557)
  [Upstream: e13c40c22d82ae26399823330ae756467d9d5ec0]


author: Xavier Simonart <xsimonar@redhat.com> - 25.03.1-27
changelog:
  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]


author: Xavier Simonart <xsimonar@redhat.com> - 25.03.1-30
changelog:
  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]


author: Han Zhou <hzhou@ovn.org> - 25.03.1-32
changelog:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]


author: Ilya Maximets <i.maximets@ovn.org> - 25.03.1-33
changelog:
  - logical-fields: Fix IPv6 dp flow explosion caused by ip6.mcast_rsvd. (#FDP-1557)
  [Upstream: 054552f1733abe4fbe4c774e2dcef116b5348429]


author: Ales Musil <amusil@redhat.com> - 25.03.1-34
changelog:
  - northd: Do not advertise NAT and LBs when "connected-as-host" is configured. (#FDP-1564)
  [Upstream: a940924245ddcc7664de7265bb5101eef88ebc66]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-35
changelog:
  - northd: controller: Support local-only dynamic route advertisements. (#FDP-1464)
  [Upstream: 7d32abd1d0d8da2c927e54d59b636633867503b8]


author: Ales Musil <amusil@redhat.com> - 25.03.1-36
changelog:
  - route-exchange-netlink: Use stub for the netlink requests.
  [Upstream: f1fbfc30fa7e2a97cd4dd142f12e8681356e5db1]


author: Xavier Simonart <xsimonar@redhat.com> - 25.03.1-64
changelog:
  - controller: Avoid IPv6 Mac_Binding related transaction errors. (#FDP-1567)
  [Upstream: 8dde6c5c59b8aa3d4d2e3b7214f04847bfb46de0]


author: Ihar Hrachyshka <ihar.hrachyshka@gmail.com> - 25.03.1-65
changelog:
  - tests: Expect musl error string for EIO errno.
  [Upstream: 939d5e82414394436f3dce813a7b4f493b93f228]


author: Ihar Hrachyshka <ihar.hrachyshka@gmail.com> - 25.03.1-66
changelog:
  - tests: Use localhost when setting "wrong" ovn-remote.
  [Upstream: 036c94a3544cf681bc98c0728b2d7bb8c35945d7]


author: Lucas Vargas Dias <lucas.vdias@luizalabs.com> - 25.03.1-67
changelog:
  - northd: Fix advertised route for ECMP static route.
  [Upstream: af749605d18a80e16abf019d74608ea3d403d53e]


author: Frode Nordahl <fnordahl@ubuntu.com> - 25.03.1-68
changelog:
  - controller: Fix mapping of learned routes to LRP.
  [Upstream: c3dbc9e342457367ef4e84621a8614f74f5843e5]


author: Mark Michelson <mmichels@redhat.com> - 25.03.1-69
changelog:
  - northd: Be more selective with installation of neighbor flows. (#FDP-1454)
  [Upstream: da34871b9a6721eb0ed2e6c046f82ffe59dfecb6]


author: Ales Musil <amusil@redhat.com> - 25.03.1-70
changelog:
  - northd: Prevent ovn-nbctl --wait=sb from returning early. (#FDP-1712)
  [Upstream: 3754c71e874ae3b2680e3cc5790ea540ac68d30e]


author: Xavier Simonart <xsimonar@redhat.com> - 25.03.1-72
changelog:
  - tests: Also remove patch ports when cleaning up resources.
  [Upstream: 794394299671eec089f05603f068a59115853481]


author: Xavier Simonart <xsimonar@redhat.com> - 25.03.1-73
changelog:
  - northd: Fix receiving NA on non resident chassis. (#FDP-1567 FDP-1728)
  [Upstream: e42c8e6f6220576dec043983e370d9251a06b91e]


author: Xavier Simonart <xsimonar@redhat.com> - 25.03.2-92
changelog:
  - controller: Fix bfd up too early after unexpected reboot. (#FDP-3075)
  [Upstream: 3565016d2289adb1e990f6666ec8760e5193c8b9]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.2-93
changelog:
  - northd: Don't forward IP multicast to routers without IGMP relay. (#FDP-2262)
  [Upstream: 248eb277718b4f683ead8027d85e46fd4ae2cf8c]


author: Ales Musil <amusil@redhat.com> - 25.03.2-94
changelog:
  - controller: Make sure we free the route_data during change check.
  [Upstream: cb962cdd3dec5d91fe566c4fe200df636deecd1b]


author: Ales Musil <amusil@redhat.com> - 25.03.2-95
changelog:
  - pinctrl: Limit the IP packet size to buffer size for ICMP Need Frag.
  [Upstream: 609ef5e7cc81c1d01eed1b0b743bc3f2b1ba92c8]


author: Ales Musil <amusil@redhat.com> - 25.03.2-97
changelog:
  - pinctrl: Make sure the BFD packet contains correct amount of data.
  [Upstream: 2240815a919e46c958e22091bf10af34d7fccf1c]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.2-31
changelog:
  - tests/ovn-ic: Add missing OVN_CLEANUP_IC call.
  [Upstream: 6f61f91d509b94b55ef3f3ef2755b5cb84c27241]


author: Ales Musil <amusil@redhat.com> - 25.03.2-32
changelog:
  - controller: Make sure we remove stale routes first.
  [Upstream: d2ab6b2cbb4c6a32a59f5c54d930f224c965b25d]


author: Frode Nordahl <fnordahl@ubuntu.com> - 25.03.2-33
changelog:
  - tests: Fix test for tc rounding behavior change.
  [Upstream: 153b0b131d9b02932a8e1b6d7312319715759229]


author: Ihar Hrachyshka <ihar.hrachyshka@gmail.com> - 25.03.2-34
changelog:
  - tests: Ignore AT_CHECK stderr for `grep ... | grep -q`.
  [Upstream: 8fefb2c585169bd2bdea0c16a5133ab4a4d974d8]


author: Xie Liu <liushyshy@gmail.com> - 25.03.2-35
changelog:
  - controller: CT zone allocation for DGP LSPs enabled ACL.
  [Upstream: 51ad88748c22dc86db4b7ece98c89cece97f834f]


author: Lucas Vargas Dias <lucas.vdias@luizalabs.com> - 25.03.2-36
changelog:
  - northd: Delete learned route with CR without chassis.
  [Upstream: bde62cfa6e59316002512a66183ba6e227d7bd02]


author: Ales Musil <amusil@redhat.com> - 25.03.2-41
changelog:
  - pinctrl: Avoid unaligned access to dhcpv6 options.
  [Upstream: 97e3fbda05592dc843fe1b40d630a8d3981d9729]


author: jun.gu <jun.gu@easystack.cn> - 25.03.2-42
changelog:
  - controller: Add missing nw_ttl field to match against legit NAs.
  [Upstream: 85eff8669788cea809d130c008e2463a8e3cb18f]


author: Han Zhou <hzhou@ovn.org> - 25.03.2-43
changelog:
  - physical: Fix remote chassis flood ingress flows for multiple encaps.
  [Upstream: 428d7be2e74a2ca3f6fca5864b269eedee9e1756]


author: Lucas Vargas Dias <lucas.vdias@luizalabs.com> - 25.03.2-46
changelog:
  - controller: Avoid adv the same ip prefix and priority.
  [Upstream: 014dad66e89956b4c2456972583f033ef141b125]


author: Alexandra Rukomoinikova <arukomoinikova@k2.cloud> - 25.03.2-47
changelog:
  - northd: Improvements of ICMP TTL exceeded behavior. (#FDP-2870)
  [Upstream: 153440f0ccecb399566388233a383e49540f945a]


author: Ales Musil <amusil@redhat.com> - 25.03.2-48
changelog:
  - lflow: Enable default drop for ND NS in with port security enabled.
  [Upstream: 9a5278378df38559cc478fbd47284785b0253cbb]


author: Jacob Tanenbaum <jtanenba@redhat.com> - 25.03.2-49
changelog:
  - ci: ovn-kubernetes: Consolidate to use ovn-kube's Dockerfile. (#FDP-852)
  [Upstream: ea16734271e4c435996d4fdab4786600009da208]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.2-59
changelog:
  - inc-proc-eng: Assert that node states are in the right range.
  [Upstream: 49496ed80fda1bafdcfc10acbe015f936077738e]


author: Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 25.03.2-60
changelog:
  - northd: Do not forward unknown ether type to router ports. (#FDP-1908)
  [Upstream: 15ef9a08f37fe218462f2c9c23c12947f4dfeff8]


author: Ales Musil <amusil@redhat.com> - 25.03.2-61
changelog:
  - lflow: Change the port security parsing log from INFO to WARN.
  [Upstream: 9f9eb9e6d15f869eaafc731dc0a61c987981a443]


author: Ales Musil <amusil@redhat.com> - 25.03.2-62
changelog:
  - ovn-util: Add helper for parsing and working with masked MACs.
  [Upstream: ff80db5fa11a2ed0ebcb46faad10b4579be5ff64]


author: Ales Musil <amusil@redhat.com> - 25.03.2-63
changelog:
  - controller: Add option to make port security compliant with RFC 9568. (#FDP-2979)
  [Upstream: 04ab770ea9bfb25c0d70667991372f9207c30c58]


author: Erlon R. Cruz <erlon@canonical.com> - 25.03.2-64
changelog:
  - controller: ACL correctly handles fragmented traffic. (#FDP-1992)
  [Upstream: f8c8b83701f515f14d77d05154eed8f59adc0021]


author: Ales Musil <amusil@redhat.com> - 25.03.2-67
changelog:
  - northd: Do not fully parse LSP port security. (#FDP-3245)
  [Upstream: 0e0efd09f8bc785516be0172eb615848b9d8583a]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.2-7
changelog:
  - tests: Ensure all central components stop at the end of the test.
  [Upstream: 81c317eaf51c51c61b8ae94b2dfd96d2817322a2]


author: Xavier Simonart <xsimonar@redhat.com> - 25.03.2-8
changelog:
  - northd: Delete learned routes when dynamic-routing is false. (#FDP-1942)
  [Upstream: b75aa38e249968f7e08a62063dfff8674684eb15]


author: Numan Siddique <numans@ovn.org> - 25.03.3-9
changelog:
  - Fix the ovn-northd recompute loops for nb_cfg updates.
  [Upstream: 7c522d6850dcb29007b44718851d1e651a11e5b5]


author: Ales Musil <amusil@redhat.com> - 25.03.3-10
changelog:
  - tests: Extract the common macros for send UDP and dump ARP/NS.
  [Upstream: f8d0e4e4423b3bd0d4f5bfb12fa119ac2fb2bd41]


author: Xavier Simonart <xsimonar@redhat.com> - 25.03.3-11
changelog:
  - northd: Fix wrong logical flows for dynamically learned routes. (#FDP-3583)
  [Upstream: 10738b2bb2a2b5e3a271a99e000f22d2c377c4ff]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.3-12
changelog:
  - ovn-controller: Skip type-update check for new port bindings. (#FDP-3819)
  [Upstream: 3f5c7398eabea45231ddabdb1468215aefee1e45]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.3-13
changelog:
  - physical: Re-evaluate CR ports when localnet port changes.
  [Upstream: 2db5cedf2b1676f674a587a29c07d1454b4ee318]


author: Ales Musil <amusil@redhat.com> - 25.03.3-14
changelog:
  - mac-cache: Make sure we re-arp for proper IP for LRP with multiple IPs. (#FDP-3784)
  [Upstream: 18e1f66611a29a25fff399386ada66c19b3ecd17]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.3-15
changelog:
  - tests: Ignore 'recirc_id left allocated' false positive.
  [Upstream: e63dc8262ed5c03a42dea9f5b1a26cb069989fbf]


author: Mark Michelson <mmichels@redhat.com> - 25.03.3-16
changelog:
  - Revert "controller: Fix bfd up too early after unexpected reboot." (#FDP-3862)
  [Upstream: 68668ab12db53a041339b35f0248c8f7b36188e0]


author: Mark Michelson <mmichels@redhat.com> - 25.03.3-18
changelog:
  - ovn-controller: Clear flow-restore-wait. (#FDP-3862)
  [Upstream: dd5400e4cdcee9b2569151e279fc0ca89b93f714]


author: Dumitru Ceara <dceara@redhat.com> - 25.09.1-6
changelog:
  - tests: Ensure all central components stop at the end of the test.
  [Upstream: 458b38315186e6046f1b354602edc0f1c072add7]


author: Xavier Simonart <xsimonar@redhat.com> - 25.09.1-7
changelog:
  - northd: Delete learned routes when dynamic-routing is false. (#FDP-1942)
  [Upstream: e8a3770b87fffa6d6c17a695782a34487dba8af4]


author: Ihar Hrachyshka <ihar.hrachyshka@gmail.com> - 25.09.2-8
changelog:
  - tests: Require scapy for 'IP packet buffering'.
  [Upstream: df99035f88e43a3b80f4c58dc530fd3f45766c54]


author: Xie Liu <liushyshy@gmail.com> - 25.09.2-9
changelog:
  - controller: CT zone allocation for DGP LSPs enabled ACL.
  [Upstream: 59abbd20f7f5753841c118e142247ea417f6e8a1]


author: Mark Michelson <mmichels@redhat.com> - 25.09.2-10
changelog:
  - en-datapath-sync: Avoid unnecessary datapath recomputes.
  [Upstream: 6da9f1fc75041bb9345bd1768a500b1e588540aa]


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-92
changelog:
  - northd: Don't forward IP multicast to routers without IGMP relay. (#FDP-2262)
  [Upstream: 1d14f5e2ce4856505fff8e08fb9baeaf5e4189f6]


author: Ales Musil <amusil@redhat.com> - 25.09.2-93
changelog:
  - controller: Add missing neighbor_table_notify_destroy call.
  [Upstream: 10f77a3ec9fe02cdbfe10d4cc35de932ab5752d3]


author: Ales Musil <amusil@redhat.com> - 25.09.2-94
changelog:
  - controller: Make sure we free the route_data during change check.
  [Upstream: 9ebb44796528449d4cef652e082605946c0da06b]


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-95
changelog:
  - northd: Fix ls_stateful_record_set_acls() not called in I-P handlers.
  [Upstream: 45c18c43e9cd3ac20f3be8d3bbdb2fa4b8ddaa7a]


author: Ales Musil <amusil@redhat.com> - 25.09.2-96
changelog:
  - pinctrl: Limit the IP packet size to buffer size for ICMP Need Frag.
  [Upstream: 2434ce731fc55873e14af566d96d676cb5eda3c1]


author: Ales Musil <amusil@redhat.com> - 25.09.2-98
changelog:
  - pinctrl: Make sure the BFD packet contains correct amount of data.
  [Upstream: db2b2d627c61470c55e3c17404c6065a4007471e]


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-21
changelog:
  - tests/ovn-ic: Add missing OVN_CLEANUP_IC call.
  [Upstream: c75770a4ec32b0db7064160914d4a56afe6223d8]


author: Ales Musil <amusil@redhat.com> - 25.09.2-23
changelog:
  - controller: Make sure we remove stale routes first.
  [Upstream: eea8adf83fd7de10708c930f581b0ff1e51e868f]


author: Ales Musil <amusil@redhat.com> - 25.09.2-24
changelog:
  - controller: Make sure we don't do shallow copy of route_data.
  [Upstream: 49ff6818f71140472a94cd3d8b2bb298e556de5a]


author: Ihar Hrachyshka <ihar.hrachyshka@gmail.com> - 25.09.2-25
changelog:
  - tests: Mark fmt_pkt test with HAVE_SCAPY requirement.
  [Upstream: cc9d497b6ecfef80a36d4fb3b11dbd41e0d4ae8a]


author: Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 25.09.2-26
changelog:
  - controller: Fix typo configuring evpn IPv6 local tunnel IP.
  [Upstream: cdb79fd515bdd7c78130151fc3de0a00fc12be69]


author: Frode Nordahl <fnordahl@ubuntu.com> - 25.09.2-27
changelog:
  - tests: Fix test for tc rounding behavior change.
  [Upstream: b907f9ed5fe1dec6e61877b6945ddb30ee1c721c]


author: Ihar Hrachyshka <ihar.hrachyshka@gmail.com> - 25.09.2-28
changelog:
  - tests: Ignore AT_CHECK stderr for `grep ... | grep -q`.
  [Upstream: a416129fabadec172d906592cab75f2df48a8568]


author: Lucas Vargas Dias <lucas.vdias@luizalabs.com> - 25.09.2-29
changelog:
  - northd: Delete learned route with CR without chassis.
  [Upstream: 75fff00bca46b2609f7002125c55f617e75f0ea5]


author: Xavier Simonart <xsimonar@redhat.com> - 25.09.2-37
changelog:
  - northd: Fix enable-stateless-acl-with-lb hairpin use.
  [Upstream: b1384b05a89971b5d398e814cd06d09949388178]


author: Xavier Simonart <xsimonar@redhat.com> - 25.09.2-40
changelog:
  - tests: Add new TAG_TEST_NOT_UPGRADABLE to some tests.
  [Upstream: a0072dc7c4f150a26045ab5a44b557ee7d8208df]


author: Lucas Vargas Dias <lucas.vdias@luizalabs.com> - 25.09.2-41
changelog:
  - controller: Avoid adv the same ip prefix and priority.
  [Upstream: 0f456ab9d97a1de1f8f9f5b8a17498ef8ca65c0e]


author: Alexandra Rukomoinikova <arukomoinikova@k2.cloud> - 25.09.2-42
changelog:
  - northd: Improvements of ICMP TTL exceeded behavior. (#FDP-2870)
  [Upstream: 33dfbceab477e436805d0bcf09f6402d8c3d1b6f]


author: Ales Musil <amusil@redhat.com> - 25.09.2-43
changelog:
  - lflow: Enable default drop for ND NS in with port security enabled.
  [Upstream: 4d3bc6a7e92dfe1fce068a4f40f8af9c9b64034e]


author: Jacob Tanenbaum <jtanenba@redhat.com> - 25.09.2-45
changelog:
  - ci: ovn-kubernetes: Consolidate to use ovn-kube's Dockerfile. (#FDP-852)
  [Upstream: d8cbf37e2f751a363fb0390a054bc5a4ce47b170]


author: Ales Musil <amusil@redhat.com> - 25.09.2-59
changelog:
  - ovn-util: Add helper for parsing and working with masked MACs.
  [Upstream: 8b70e8b293ccb176c5a2e8cca96f27551468ef99]


author: Ales Musil <amusil@redhat.com> - 25.09.2-60
changelog:
  - controller: Add option to make port security compliant with RFC 9568. (#FDP-2979)
  [Upstream: 18516f8cd615833861598aca048e47c3292315cd]


author: Dumitru Ceara <dceara@redhat.com> - 25.09.2-61
changelog:
  - ci: ovn-kubernetes: Move our CI jobs to OVN-K release-1.2 branch.
  [Upstream: 3ea381d7443fdb1e9a2676580558363b0737462b]


author: Erlon R. Cruz <erlon@canonical.com> - 25.09.2-62
changelog:
  - controller: ACL correctly handles fragmented traffic. (#FDP-1992)
  [Upstream: 8dda00d51fe0b2047e241c286d52ec8af9947160]


author: Ales Musil <amusil@redhat.com> - 25.09.2-65
changelog:
  - northd: Make sure we repopulate the IPAM reserved addresses. (#FDP-2982)
  [Upstream: 8748adda12fd1420116e9e78adb2ce5d7ebce8f6]


author: Mark Michelson <mmichels@redhat.com> - 25.09.2-66
changelog:
  - en-datapath-logical-switch: Use correct datatype.
  [Upstream: 96e081bc9de0ea89239e1960528d8765a9670805]


author: Ales Musil <amusil@redhat.com> - 25.09.2-67
changelog:
  - northd: Do not fully parse LSP port security. (#FDP-3245)
  [Upstream: 4918661fb67312c3df7280dc6a0b7800b3368706]


author: Numan Siddique <numans@ovn.org> - 25.09.3-15
changelog:
  - pinctrl: Use correct IPv6 dst for nd_ns action for IPv4 over v6.
  [Upstream: 1be1da079b5c46e5f6a8446f09c5f95c67e3a37c]


author: Numan Siddique <numans@ovn.org> - 25.09.3-16
changelog:
  - Fix the ovn-northd recompute loops for nb_cfg updates.
  [Upstream: 8cd13a754d22816a30218dfcf749ec1edc057454]


author: Ales Musil <amusil@redhat.com> - 25.09.3-17
changelog:
  - tests: Extract the common macros for send UDP and dump ARP/NS.
  [Upstream: 4422ee01ffa49e3524c26bed9b9f5547c686e900]


author: Xavier Simonart <xsimonar@redhat.com> - 25.09.3-18
changelog:
  - northd: Fix wrong logical flows for dynamically learned routes. (#FDP-3583)
  [Upstream: aba711e6603e03bcdcacd85590e4232193df2d9e]


author: Dumitru Ceara <dceara@redhat.com> - 25.09.3-19
changelog:
  - physical: Re-evaluate CR ports when localnet port changes.
  [Upstream: 8a530c7387cbba246b3485d606a9cca4629f0a7e]


author: Ales Musil <amusil@redhat.com> - 25.09.3-20
changelog:
  - mac-cache: Make sure we re-arp for proper IP for LRP with multiple IPs. (#FDP-3784)
  [Upstream: c73c9676c83ef008cfc813fe6a8c8f1781478ab2]


author: Dumitru Ceara <dceara@redhat.com> - 25.09.3-21
changelog:
  - tests: Ignore 'recirc_id left allocated' false positive.
  [Upstream: 30c675c1086dfceaf13ba45162d172f07b68df4b]


author: Mark Michelson <mmichels@redhat.com> - 25.09.3-22
changelog:
  - Revert "controller: Fix bfd up too early after unexpected reboot." (#FDP-3862)
  [Upstream: 981535ffcbe6c2170da90f01351b40118587ecae]


author: Mark Michelson <mmichels@redhat.com> - 25.09.3-24
changelog:
  - ovn-controller: Clear flow-restore-wait. (#FDP-3862)
  [Upstream: a21b011ee922f204af9a55f724883dc7eeebdfcc]


author: Dumitru Ceara <dceara@redhat.com> - 26.03.0-21
changelog:
  - northd: Fix other_config init in incremental LS processing.
  [Upstream: 639b3a3eca6342997cb7a2fc25c5941a99478341]


author: Dumitru Ceara <dceara@redhat.com> - 26.03.0-22
changelog:
  - northd: Remove redundant init_mcast_info_for_datapath() call.
  [Upstream: 6a1395f5486ffd793aa4aeb4ae1c72bc34af97c5]


author: Dumitru Ceara <dceara@redhat.com> - 26.03.0-23
changelog:
  - northd: Fix ls_stateful_record_set_acls() not called in I-P handlers.
  [Upstream: 58f8de11467dc0cc293af9b4d8603ab08fdbb0a8]


author: Dumitru Ceara <dceara@redhat.com> - 26.03.0-24
changelog:
  - northd: Skip conntrack for EVPN remote VTEP traffic. (#FDP-3462)
  [Upstream: e8dc420206d26c4629597b26739278a6772450d4]


author: Ales Musil <amusil@redhat.com> - 26.03.0-25
changelog:
  - pinctrl: Limit the IP packet size to buffer size for ICMP Need Frag.
  [Upstream: 9d674c684a56aef12c53b1e4596b6eded23a0402]


author: Ales Musil <amusil@redhat.com> - 26.03.0-27
changelog:
  - pinctrl: Make sure the BFD packet contains correct amount of data.
  [Upstream: 4892929ea15f3409751a4309635a6522c2ea5b0b]


author: Alexandra Rukomoinikova <ARukomoinikova@k2.cloud> - 26.03.1-31
changelog:
  - tests: ARP to VIF port on LS with localnet port.
  [Upstream: a52d606867d6040b032a1abe73b06eab699a0a03]


author: Ales Musil <amusil@redhat.com> - 26.03.1-32
changelog:
  - mac-cache: Make sure we re-arp for proper IP for LRP with multiple IPs. (#FDP-3784)
  [Upstream: 4230294124e069c5d3fa1f19d086d1601af82887]


author: Dumitru Ceara <dceara@redhat.com> - 26.03.1-33
changelog:
  - tests: Ignore 'recirc_id left allocated' false positive.
  [Upstream: a0a59a4caffcc646040d7036279b219c27c2bfaf]


author: Mark Michelson <mmichels@redhat.com> - 26.03.1-34
changelog:
  - Revert "controller: Fix bfd up too early after unexpected reboot." (#FDP-3862)
  [Upstream: 9078d91294f455c90eb1fb7cdedce9694cc11ff7]


author: Dumitru Ceara <dceara@redhat.com> - 26.03.1-35
changelog:
  - lflow: Always consider EVPN VTEP logical ingress/egress ports local.
  [Upstream: 86ca28168a35ed013ee7b88bee5b6390958510e8]


author: Ales Musil <amusil@redhat.com> - 26.03.1-37
changelog:
  - controller: Make the packet buffering lockless. (#FDP-3301)
  [Upstream: e480fb1720497be68d9a40f920597b7964396770]


author: Mark Michelson <mmichels@redhat.com> - 26.03.1-40
changelog:
  - ovn-controller: Clear flow-restore-wait. (#FDP-3862)
  [Upstream: 79350ef86e5c30e03066cb24a585bdf9fb09667c]


