SUSE-RU-2019:2498-1: moderate: Recommended update for qclib

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for qclib
______________________________________________________________________________

Announcement ID:    SUSE-RU-2019:2498-1
Rating:             moderate
References:         #1135781 
Affected Products:
                    SUSE Linux Enterprise Module for Development Tools 15-SP1
______________________________________________________________________________

   An update that has one recommended fix can now be installed.

Description:

   This update for qclib fixes the following issues:

   qclib was upgraded to version 1.4.1 (bsc#1135781, Fate#327836):

   Changes:

     * Added SMT support by properly differentiating between cores and CPUs.
       I.e. switched from qc_num_cpu_* to qc_num_core_* attributes in layers
       CEC, LPAR, ZVM_HYPERVISOR and KVM_HYPERVISOR. NOTE: qc_num_cpu_*
       attributes remain to be valid in these cases to preserve backwards
       compatibility for now. This will be removed in
               one of the next releases! It is recommended to switch to the
   new attributes _now_ and test with CONFIG_V1_COMPATIBILITY disabled!
     * Added new attributes qc_num_threads_cp and qc_num_threads_ifl to
       layers CEC, LPAR and ZVM_HYPERVISOR.
     * Deprecated attribute qc_mobility_eligible (remains valid for now) and
       replaced with qc_mobility_enabled to match z/VM terminology. Likewise
       switched QC_LAYER_TYPE_ZVM_CPU_POOL to QC_LAYER_TYPE_ZVM_RESOURCE_POOL.
     * Moved build customization defines (e.g. CONFIG_V1_COMPATIBILITY) to
       query_capacity.h.
     * Don't build with textual hypfs per default anymore due to
       unrecoverable issues (see section 'Bug fixes'). Since all Linux
       distributions ship with debugfs (providing binary hypfs support),
       overriding textual hypfs, for years, this change will hardly ever be
       noticable. Enable define CONFIG_TEXTUAL_HYPFS in query_capacity.h to
       revert. Note that textual hypfs support will be removed in a future
       release.

   Bug fixes:

     * qc_dump: Don't abort the dump in case qc_test fails.
     * Attributes qc_cp_weight_capping and qc_ifl_weight_capping were set
       even when initial capping was not set in the LPAR's activation profile.
     * Added an exception to consistency check to ignore inconsistencies
       between textual hypfs and STHYI for attributes qc_num_cp_total and
       qc_num_ifl_total in the LPAR layer. Background: Textual hypfs cannot
       tell whether a core is configured or not. It therefore reports all
       cores as configured, which can be wrong.
     * Security: Fix PATH attack vulnerability when dumping (see QC_DEBUG=2)
     * STHYI: Add fallback for pre-glibc 2.16 (not using getauxval())
     * Handle mismatching STHYI and /proc/sysinfo layer counts
     * On LPAR, fix incomplete dump of binary hypfs when textual hypfs is
       mounted


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Development Tools 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP1-2019-2498=1



Package List:

   - SUSE Linux Enterprise Module for Development Tools 15-SP1 (s390x):

      libqc1-1.4.1-6.5.1
      libqc1-debuginfo-1.4.1-6.5.1
      qclib-1.4.1-6.5.1
      qclib-debugsource-1.4.1-6.5.1
      qclib-devel-1.4.1-6.5.1
      qclib-devel-static-1.4.1-6.5.1


References:

   https://bugzilla.suse.com/1135781