We are stoked to announce the release of: os_vif 1.11.2: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/os_vif Download the package from: https://pypi.org/project/os_vif For more details, please see below. 1.11.2 ^^^^^^ Security Issues * Prevent Linux Bridge from replying to ARP messages. It should reply only if the target IP address is a local address configured on the incoming interface and it should always use the best local address. See The ARP flux problem (http://linux-ip.net/html/ether- arp.html #ether-arp-flux) for more information. Changes in os_vif 1.11.1..1.11.2 -------------------------------- ca9963c Prevent "qbr" Linux Bridge from replying to ARP messages 1255884 OpenDev Migration Patch 59cbece make kuryr-kubernetes-tempest-daemon-octavia non voting 284993b import zuul job settings from project-config 9ff511f Update UPPER_CONSTRAINTS_FILE for stable/rocky 769f59e Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 12 +++++++++--- playbooks/os-vif-ovs/run.yaml | 6 +++--- .../notes/prevent-lb-reply-arp-6459133bfb056069.yaml | 8 ++++++++ tox.ini | 2 +- vif_plug_linux_bridge/linux_net.py | 17 +++++++++++++++++ vif_plug_ovs/linux_net.py | 17 +++++++++++++++++ 9 files changed, 79 insertions(+), 12 deletions(-)