We eagerly announce the release of: os_vif 1.9.2: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/os_vif Download the package from: https://pypi.org/project/os_vif For more details, please see below. 1.9.2 ^^^^^ Security Issues * Prevent Linux Bridge from replying to ARP messages. It should reply only if the target IP address is a local address configured on the incoming interface and it should always use the best local address. See The ARP flux problem (http://linux-ip.net/html/ether- arp.html #ether-arp-flux) for more information. Changes in os_vif 1.9.1..1.9.2 ------------------------------ 7b84b52 Prevent "qbr" Linux Bridge from replying to ARP messages e09d879 add upper_constraints support 67db840 OpenDev Migration Patch 3d551a9 import zuul job settings from project-config 37da821 fix tox py27 job b026d54 Fix VF-rep lookup routine to use parent PF number Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 7 ++ .../prevent-lb-reply-arp-6459133bfb056069.yaml | 8 ++ tox.ini | 11 ++- vif_plug_linux_bridge/linux_net.py | 17 +++++ vif_plug_ovs/linux_net.py | 69 ++++++++++++++++- 8 files changed, 189 insertions(+), 19 deletions(-)