fwaas netfilter_log: incorrect decode of log prefix under python 3

[James Page]

Under Python 3, the prefix of a firewall log message is not correctly decoded "b'10612530182266949194'":

2019-06-10 09:14:34 Unknown cookie packet_in pkt=ethernet(dst='fa:16:3e:c6:58:5e',ethertype=2048,src='fa:16:3e:e0:2c:be')ipv4(csum=51290,dst='10.5.0.10',flags=2,header_length=5,identification=37612,offset=0,option=None,proto=6,src='192.168.21.182',tos=16,total_length=52,ttl=63,version=4)tcp(ack=3151291228,bits=17,csum=23092,dst_port=57776,offset=8,option=[TCPOptionNoOperation(kind=1,length=1), TCPOptionNoOperation(kind=1,length=1), TCPOptionTimestamps(kind=8,length=10,ts_ecr=1574746440,ts_val=482688)],seq=2769917228,src_port=22,urgent=0,window_size=3120)
2019-06-10 09:14:34 {'prefix': "b'10612530182266949194'", 'msg': "ethernet(dst='fa:16:3e:c6:58:5e',ethertype=2048,src='fa:16:3e:e0:2c:be')ipv4(csum=51290,dst='10.5.0.10',flags=2,header_length=5,identification=37612,offset=0,option=None,proto=6,src='192.168.21.182',tos=16,total_length=52,ttl=63,version=4)tcp(ack=3151291228,bits=17,csum=23092,dst_port=57776,offset=8,option=[TCPOptionNoOperation(kind=1,length=1), TCPOptionNoOperation(kind=1,length=1), TCPOptionTimestamps(kind=8,length=10,ts_ecr=1574746440,ts_val=482688)],seq=2769917228,src_port=22,urgent=0,window_size=3120)"}
2019-06-10 09:14:34 {'0bf81ded-bf94-437d-ad49-063bba9be9bb': [<neutron_fwaas.services.logapi.agents.drivers.iptables.log.LogPrefix object at 0x7f7563079048>, <neutron_fwaas.services.logapi.agents.drivers.iptables.log.LogPrefix object at 0x7f756308abe0>]}

This results in the firewall log driver not being able to map the message to the associated port and log resources in neutron resulting in the 'unknown cookie packet_in' warning message.

[James Page (james-page)]

Incorrect encoding:

https://opendev.org/openstack/neutron-fwaas/src/branch/master/neutron_fwaas/privileged/netfilter_log/libnetfilter_log.py#L169

str(X) -> X.decode('UTF-8')

[James Page (james-page)]

Illustrated:

>>> str(b'10612530182266949194')
"b'10612530182266949194'"
>>> b'10612530182266949194'.decode('UTF-8')
'10612530182266949194'

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/664234

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/rocky
Review: https://review.opendev.org/664514

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/664515

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/664234
Committed: https://git.openstack.org/cgit/openstack/neutron-fwaas/commit/?id=5c334d584b180c735d8744ff1807f2747c024a55
Submitter: Zuul
Branch: master

commit 5c334d584b180c735d8744ff1807f2747c024a55
Author: James Page <email address hidden>
Date: Mon Jun 10 10:36:05 2019 +0100

    netfilter_log: Correctly decode binary type prefix

    Under Python 3, firewall log prefixes are incorrectly decoded
    resulting in a mismatch between the stringy-fied 'prefix' value
    and the information available in the prefixes data.

    Use oslo.utils safe_decode function to ensure that data is
    correctly decoded.

    Change-Id: I9742207e98c07f0a4632631631288d9ada8cf8c7
    Closes-Bug: 1832210

[Launchpad Janitor (janitor)]

This bug was fixed in the package neutron-fwaas - 1:15.0.0~b1~git2019061312.45a36b8ba-0ubuntu1

---------------
neutron-fwaas (1:15.0.0~b1~git2019061312.45a36b8ba-0ubuntu1) eoan; urgency=medium

  * d/p/netfilter_log-Correct-decode-binary-types.patch: Cherry pick fix
    to resolve decoding of netfilter log prefix information under Python
    3 (LP: #1832210).
  * New upstream snapshot for OpenStack Train.
  * d/control: Align (Build-)Depends with upstream.

 -- James Page <email address hidden> Thu, 13 Jun 2019 12:04:51 +0100

[James Page (james-page)]

Patches pushed to stein and rocky branches for Ubuntu packaging.

[James Page (james-page)]

Ubuntu SRU information

[Impact]
netfilter based firewall logging does not correctly identify the log prefix resulting in lack of mapping from netfilter log messages to neutron ports.

[Test Case]
Deploy OpenStack
Enabled firewall-group logging (~openstack-charmers-next feature)
Create instance and firewall-group for SSH access.
Access instance via SSH
(original bug report unknown cookie message seen).

[Regression Potential]
Minimal; the safe_encode function used to ensure that the log prefix is correctly decoded has been well used and tested across OpenStack.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/664514
Committed: https://git.openstack.org/cgit/openstack/neutron-fwaas/commit/?id=ea7590e4e19e5ef0bb8731d6ed1374084feeddad
Submitter: Zuul
Branch: stable/rocky

commit ea7590e4e19e5ef0bb8731d6ed1374084feeddad
Author: James Page <email address hidden>
Date: Mon Jun 10 10:36:05 2019 +0100

    netfilter_log: Correctly decode binary type prefix

    Under Python 3, firewall log prefixes are incorrectly decoded
    resulting in a mismatch between the stringy-fied 'prefix' value
    and the information available in the prefixes data.

    Use oslo.utils safe_decode function to ensure that data is
    correctly decoded.

    Change-Id: I9742207e98c07f0a4632631631288d9ada8cf8c7
    Closes-Bug: 1832210
    (cherry picked from commit 652f532d840c583a6997f5de3f988daf803122e8)

[Brian Murray (brian-murray)]

Hello James, or anyone else affected,

Accepted neutron-fwaas into disco-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/neutron-fwaas/1:14.0.0-0ubuntu1.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-disco to verification-done-disco. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-disco. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Brian Murray (brian-murray)]

Hello James, or anyone else affected,

Accepted neutron-fwaas into cosmic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/neutron-fwaas/1:13.0.1-0ubuntu1.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-cosmic to verification-done-cosmic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-cosmic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[James Page (james-page)]

Hello James, or anyone else affected,

Accepted neutron-fwaas into stein-proposed. The package will build now and be available in the Ubuntu Cloud Archive in a few hours, and then in the -proposed repository.

Please help us by testing this new package. To enable the -proposed repository:

  sudo add-apt-repository cloud-archive:stein-proposed
  sudo apt-get update

Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-stein-needed to verification-stein-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-stein-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[James Page (james-page)]

Hello James, or anyone else affected,

Accepted neutron-fwaas into rocky-proposed. The package will build now and be available in the Ubuntu Cloud Archive in a few hours, and then in the -proposed repository.

Please help us by testing this new package. To enable the -proposed repository:

  sudo add-apt-repository cloud-archive:rocky-proposed
  sudo apt-get update

Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-rocky-needed to verification-rocky-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-rocky-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[James Page (james-page)]

Verified in disco-proposed:

2019-07-04 06:05:18.647 24829 INFO neutron_fwaas.services.logapi.agents.drivers.iptables.log [-] action=DROP, project_id=7ff67d14319b40fd925e8926b68090df, log_resource_ids=['6e386314-2e36-456e-b90b-d1d51e91ee8d'], port=59fc8ffd-f724-447c-b95a-f11f35441c9d, pkt=ethernet(dst='fa:16:3e:c3:b2:28',ethertype=2048,src='fa:16:3e:41:6f:cc')ipv4(csum=50040,dst='192.168.21.47',flags=2,header_length=5,identification=38986,offset=0,option=None,proto=1,src='10.5.0.10',tos=0,total_length=84,ttl=63,version=4)icmp(code=0,csum=61993,data=echo(data=b'\x1d\x97\x1d]\x00\x00\x00\x00\x98[\t\x00\x00\x00\x00\x00\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&\'()*+,-./01234567',id=27314,seq=1),type=8)
2019-07-04 06:05:19.852 24829 INFO neutron_fwaas.services.logapi.agents.drivers.iptables.log [-] action=DROP, project_id=7ff67d14319b40fd925e8926b68090df, log_resource_ids=['6e386314-2e36-456e-b90b-d1d51e91ee8d'], port=59fc8ffd-f724-447c-b95a-f11f35441c9d, pkt=ethernet(dst='fa:16:3e:c3:b2:28',ethertype=2048,src='fa:16:3e:41:6f:cc')ipv4(csum=50015,dst='192.168.21.47',flags=2,header_length=5,identification=39011,offset=0,option=None,proto=1,src='10.5.0.10',tos=0,total_length=84,ttl=63,version=4)icmp(code=0,csum=33733,data=echo(data=b'\x1e\x97\x1d]\x00\x00\x00\x00\x05\xbf\t\x00\x00\x00\x00\x00\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&\'()*+,-./01234567',id=27314,seq=2),type=8)
2019-07-04 06:05:21.978 24829 INFO neutron_fwaas.services.logapi.agents.drivers.iptables.log [-] action=ACCEPT, project_id=7ff67d14319b40fd925e8926b68090df, log_resource_ids=['6e386314-2e36-456e-b90b-d1d51e91ee8d'], port=59fc8ffd-f724-447c-b95a-f11f35441c9d, pkt=ethernet(dst='fa:16:3e:c3:b2:28',ethertype=2048,src='fa:16:3e:41:6f:cc')ipv4(csum=14078,dst='192.168.21.47',flags=2,header_length=5,identification=9432,offset=0,option=None,proto=6,src='10.5.0.10',tos=0,total_length=60,ttl=63,version=4)tcp(ack=0,bits=2,csum=46828,dst_port=22,offset=10,option=[TCPOptionMaximumSegmentSize(kind=2,length=4,max_seg_size=8918), TCPOptionSACKPermitted(kind=4,length=2), TCPOptionTimestamps(kind=8,length=10,ts_ecr=0,ts_val=1865326999), TCPOptionNoOperation(kind=1,length=1), TCPOptionWindowScale(kind=3,length=3,shift_cnt=7)],seq=3543962897,src_port=45662,urgent=0,window_size=26754)

# apt-cache policy python3-neutron-fwaas
python3-neutron-fwaas:
  Installed: 1:14.0.0-0ubuntu1.1
  Candidate: 1:14.0.0-0ubuntu1.1
  Version table:
 *** 1:14.0.0-0ubuntu1.1 500
        500 http://archive.ubuntu.com/ubuntu disco-proposed/main amd64 Packages
        100 /var/lib/dpkg/status
     1:14.0.0-0ubuntu1 500
        500 http://nova.clouds.archive.ubuntu.com/ubuntu disco/main amd64 Packages

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron-fwaas 13.0.2 release.

[Launchpad Janitor (janitor)]

This bug was fixed in the package neutron-fwaas - 1:14.0.0-0ubuntu1.1

---------------
neutron-fwaas (1:14.0.0-0ubuntu1.1) disco; urgency=medium

  [ Corey Bryant ]
  * d/gbp.conf: Create stable/stein branch.

  [ James Page ]
  * d/p/netfilter_log-Correct-decode-binary-types.patch: Cherry pick fix
    to resolve decoding of netfilter log prefix information under Python
    3 (LP: #1832210).

 -- Corey Bryant <email address hidden> Tue, 25 Jun 2019 10:27:58 +0100

[Brian Murray (brian-murray)]

The verification of the Stable Release Update for neutron-fwaas has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[James Page (james-page)]

# apt-cache policy python3-neutron-fwaas
python3-neutron-fwaas:
  Installed: 1:14.0.0-0ubuntu1.1~cloud0
  Candidate: 1:14.0.0-0ubuntu1.1~cloud0
  Version table:
 *** 1:14.0.0-0ubuntu1.1~cloud0 500
        500 http://ubuntu-cloud.archive.canonical.com/ubuntu bionic-proposed/stein/main amd64 Packages
        100 /var/lib/dpkg/status

Sample log messages:

Aug 5 09:17:33 juju-ccc3cd-bionic-stein-19 neutron-l3-agent: action=DROP, project_id=8d69996595bf43568a66f6e4edb551b7, log_resource_ids=['719c90e1-e6a4-49cb-a105-74cc86cff67f'], port=79704b31-91a4-42ae-b66f-e356b2811df0, pkt=ethernet(dst='fa:16:3e:97:b3:4f',ethertype=2048,src='fa:16:3e:41:6f:cc')ipv4(csum=20223,dst='192.168.21.92',flags=2,header_length=5,identification=3223,offset=0,option=None,proto=1,src='10.5.0.10',tos=0,total_length=84,ttl=63,version=4)icmp(code=0,csum=63684,data=echo(data=b'#\xf4G]\x00\x00\x00\x00\xc8\xc7\x03\x00\x00\x00\x00\x00\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&\'()*+,-./01234567',id=2227,seq=156),type=8)
Aug 5 09:17:34 juju-ccc3cd-bionic-stein-19 neutron-l3-agent: action=DROP, project_id=8d69996595bf43568a66f6e4edb551b7, log_resource_ids=['719c90e1-e6a4-49cb-a105-74cc86cff67f'], port=79704b31-91a4-42ae-b66f-e356b2811df0, pkt=ethernet(dst='fa:16:3e:97:b3:4f',ethertype=2048,src='fa:16:3e:41:6f:cc')ipv4(csum=20066,dst='192.168.21.92',flags=2,header_length=5,identification=3380,offset=0,option=None,proto=1,src='10.5.0.10',tos=0,total_length=84,ttl=63,version=4)icmp(code=0,csum=8550,data=echo(data=b'$\xf4G]\x00\x00\x00\x00\x9e%\x04\x00\x00\x00\x00\x00\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !"#$%&\'()*+,-./01234567',id=2227,seq=157),type=8)
Aug 5 09:17:35 juju-ccc3cd-bionic-stein-19 neutron-l3-agent: action=ACCEPT, project_id=8d69996595bf43568a66f6e4edb551b7, log_resource_ids=['719c90e1-e6a4-49cb-a105-74cc86cff67f'], port=79704b31-91a4-42ae-b66f-e356b2811df0, pkt=ethernet(dst='fa:16:3e:97:b3:4f',ethertype=2048,src='fa:16:3e:41:6f:cc')ipv4(csum=2473,dst='192.168.21.92',flags=2,header_length=5,identification=20992,offset=0,option=None,proto=6,src='10.5.0.10',tos=0,total_length=60,ttl=63,version=4)tcp(ack=0,bits=2,csum=7323,dst_port=22,offset=10,option=[TCPOptionMaximumSegmentSize(kind=2,length=4,max_seg_size=8918), TCPOptionSACKPermitted(kind=4,length=2), TCPOptionTimestamps(kind=8,length=10,ts_ecr=0,ts_val=3542096121), TCPOptionNoOperation(kind=1,length=1), TCPOptionWindowScale(kind=3,length=3,shift_cnt=7)],seq=1338233633,src_port=46744,urgent=0,window_size=26754)

[James Page (james-page)]

The verification of the Stable Release Update for neutron-fwaas has completed successfully and the package has now been released to -updates. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[James Page (james-page)]

This bug was fixed in the package neutron-fwaas - 1:14.0.0-0ubuntu1.1~cloud0
---------------

 neutron-fwaas (1:14.0.0-0ubuntu1.1~cloud0) bionic-stein; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 neutron-fwaas (1:14.0.0-0ubuntu1.1) disco; urgency=medium
 .
   [ Corey Bryant ]
   * d/gbp.conf: Create stable/stein branch.
 .
   [ James Page ]
   * d/p/netfilter_log-Correct-decode-binary-types.patch: Cherry pick fix
     to resolve decoding of netfilter log prefix information under Python
     3 (LP: #1832210).

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/664515
Committed: https://git.openstack.org/cgit/openstack/neutron-fwaas/commit/?id=2f2c08a8c3fe2f78c6658b0050417c72f01b20be
Submitter: Zuul
Branch: stable/stein

commit 2f2c08a8c3fe2f78c6658b0050417c72f01b20be
Author: James Page <email address hidden>
Date: Mon Jun 10 10:36:05 2019 +0100

    netfilter_log: Correctly decode binary type prefix

    Under Python 3, firewall log prefixes are incorrectly decoded
    resulting in a mismatch between the stringy-fied 'prefix' value
    and the information available in the prefixes data.

    Use oslo.utils safe_decode function to ensure that data is
    correctly decoded.

    Change-Id: I9742207e98c07f0a4632631631288d9ada8cf8c7
    Closes-Bug: 1832210
    (cherry picked from commit 652f532d840c583a6997f5de3f988daf803122e8)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron-fwaas 15.0.0.0b1 development milestone.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/neutron-fwaas 14.0.1 release.

[Corey Bryant (corey.bryant)]

Rocky is end of life so I'm going to mark this as won't fix. It is in rocky-proposed though, so if someone does test it successfully please update the bug and we can promote to updates.

[Corey Bryant (corey.bryant)]

This bug was fixed in the package neutron-fwaas - 1:16.0.0+git2022060611.b7be99c14-0ubuntu1~cloud0
---------------

 neutron-fwaas (1:16.0.0+git2022060611.b7be99c14-0ubuntu1~cloud0) jammy-zed; urgency=medium
 .
   * New package for the Ubuntu Cloud Archive.
 .
 neutron-fwaas (1:16.0.0+git2022060611.b7be99c14-0ubuntu1) kinetic; urgency=medium
 .
   * New upstream snapshot for OpenStack Zed.
   * d/control: Update standards version to 4.6.1.
 .
 neutron-fwaas (1:16.0.0+git2022033113.de8a4d4cf-0ubuntu1) jammy; urgency=medium
 .
   * New upstream snapshot for OpenStack Yoga.
 .
 neutron-fwaas (1:16.0.0+git2022030710.a9f26b81e-0ubuntu1) jammy; urgency=medium
 .
   * d/control: Update VCS paths for move to lp:~ubuntu-openstack-dev.
   * New upstream snapshot for OpenStack Yoga.
   * d/control: Align (Build-)Depends with upstream.
   * d/control: Switch to debhelper-compat 13.
   * d/p/add-missing-pk-firewall-group-associations-v2.patch: Rebased.
 .
 neutron-fwaas (1:16.0.0-0ubuntu1) groovy; urgency=medium
 .
   * d/watch: Scope to 16.x series and get tarballs from opendev.org.
   * New upstream release for OpenStack Ussuri (LP: #1877642).
 .
 neutron-fwaas (1:16.0.0~b3~git2020032402.5e6c04885-0ubuntu1) focal; urgency=medium
 .
   * New upstream snapshot for OpenStack Ussuri.
 .
 neutron-fwaas (1:16.0.0~b2~git2020020713.d9ac7173f-0ubuntu1) focal; urgency=medium
 .
   * New upstream snapshot for OpenStack Ussuri.
   * d/p/add-missing-pk-firewall-group-associations-v2.patch: Refreshed.
 .
 neutron-fwaas (1:16.0.0~b1~git2019121712.330e233a4-0ubuntu1) focal; urgency=medium
 .
   * New upstream snapshot for OpenStack Ussuri.
   * d/control: Align (Build-)Depends with upstream.
   * d/control, d/rules, d/compat: Switch to debhelper compat 12 and pybuild.
   * d/rules: Update PBR_VERSION to handle ~git versioning.
 .
 neutron-fwaas (1:15.0.0-0ubuntu1) eoan; urgency=medium
 .
   * New upstream release for OpenStack Train.
 .
 neutron-fwaas (1:15.0.0~rc1-0ubuntu3) eoan; urgency=medium
 .
   * d/p/add-missing-pk-firewall-group-associations-v2.patch: Cherry pick
     fix to resolve issue with missing primary key on
     firewall_group_associations_v2 table (LP: #1831986).
 .
 neutron-fwaas (1:15.0.0~rc1-0ubuntu2) eoan; urgency=medium
 .
   * d/p/disable-check-constraint-for-public-columns.patch: Disable
     creation of check constraints for 'public' columns under MySQL
     (LP: #1846606) resolving compatibility with MySQL >= 8.
   * d/tests/*: Add autopkgtest to validate database migrations under
     MySQL.
 .
 neutron-fwaas (1:15.0.0~rc1-0ubuntu1) eoan; urgency=medium
 .
   [ Sahid Orentino Ferdjaoui ]
   * New upstream snapshot for OpenStack Train.
 .
   [ Corey Bryant ]
   * d/watch: Monitor 15.x series.
   * New upstream release for OpenStack Train.
   * d/control: Align (Build-)Depends with upstream.
   * d/p/drop-sphinxcontrib-apidoc.patch: Dropped. No longer needed.
 .
 neutron-fwaas (1:15.0.0~b2~git2019073114.243a7ef57-0ubuntu1) eoan; urgency=medium
 .
   * New upstream snapshot for OpenStack Train.
   * d/control: Align (Build-)Depends with upstream.
   * d/p/netfilter_log-Correct-decode-binary-types.patch: Dropped.
     Fixed in snapshot.
 .
 neu...