SUSE-RU-2024:2613-1: moderate: Recommended update for qclib

SLE-UPDATES null at suse.de
Mon Jul 29 16:36:21 UTC 2024



# Recommended update for qclib

Announcement ID: SUSE-RU-2024:2613-1  
Rating: moderate  
References:

  * bsc#1214466
  * bsc#1216212
  * bsc#1216257
  * bsc#1217923
  * bsc#1219227
  * bsc#1222143
  * bsc#1222282
  * bsc#1222675
  * bsc#1223090
  * bsc#1226609
  * jsc#PED-3223
  * jsc#PED-3275
  * jsc#PED-3284
  * jsc#PED-3285
  * jsc#PED-4604
  * jsc#PED-578
  * jsc#PED-5783
  * jsc#PED-585
  * jsc#PED-626
  * jsc#PED-6539
  * jsc#PED-6649
  * jsc#PED-6785
  * jsc#PED-7136
  * jsc#PED-7138

  
Affected Products:

  * openSUSE Leap 15.4
  * SUSE Linux Enterprise Micro 5.3
  * SUSE Linux Enterprise Micro 5.4
  * SUSE Linux Enterprise Micro for Rancher 5.3
  * SUSE Linux Enterprise Micro for Rancher 5.4
  * SUSE Linux Enterprise Server 15 SP4
  * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4

  
  
An update that contains 14 features and has 10 fixes can now be installed.

## Description:

This update for qclib fixes the following issues:

  * Upgrade qclib to version 2.4.1 for SP4 LTSS (bsc#1214466)
  * Applied a patch to change the _PATH_MOUNTED (bsc#1222143)

Upgrade to version 2.4.1 (jsc#PED-3285)

  * Handle systems with `/sys/kernel/security/lockdown` enabled
  * Consistency check: Fix accounting of reserved cores and CPUs
  * Trace: Fix display of version information
  * Doxygen config: Remove unused options

  * Applied a patch to work under kernel lockdown (bsc#1216212,bsc#1214466)

Upgrade to version 2.4.0 (jsc#PED-3284, jsc#PED-3285):

  * Recognize single frame models and rackable models
  * zname: Add support for option --json
  * qc_dump: Add trace and JSON dump to .tgz

Upgraded to version 2.3.2 (jsc#PED-585, jsc#PED-626)

  * Recognize IBM LinuxONE Emperor 4
  * Recognize IBM z16

s390-tools was updated to 2.30.1:

  * Added print for 'qc_type_name', amended the layers (bsc#1226609)

  * s390-tools-genprotimg-data needs to require filesystem in order to ensure we
    are not installed before potential UsrMerge migration code was running
    (boo#1223090).

  * Added recommends s390-tools-genprotimg-data

  * Updated to enable Secure Execution in the Cloud (bsc#1222675)

  * Creates a s390-tools-genprotimg-data-*.noarch.rpm package which includes
    s390x bootload binaries for x86_64:
    * /lib/s390-tools/stage3.bin
    * /usr/share/s390-tools/genprotimg/stage3a.bin
    * /usr/share/s390-tools/genprotimg/stage3b_reloc.bin
  * Excludes the above binaries from the (main) s390-tools-*.s390x.rpm
  * Requires: s390-tools-genprotimg-data

  * SE-tooling: New IBM host-key subject locality (s390-tools) (bsc#1222282)

  * Provide groups as required by RPM 4.19

Upgrade s390-tools to version 2.31 (jsc#PED-3275, jsc#PED-3223):

  * General:
  * common.mak: Set default C/C++ standard to gnu11/gnu++11
  * Add new tools / libraries:
  * pvapconfig: Tool to automatically configure APQNs in SE KVM guests
  * s390-tools: Provide pre-commit configuration
  * Changes of existing tools:
  * cpuplugd: Adjust to CPU 0 being no longer hotpluggable
  * dbginfo.sh: Check for Dynamic Partition Mode
  * dbginfo.sh: Update man page and copyright
  * rust/pv: Add user-data signing and verifying
  * rust/pvsecret: Add user defined signatures and verifications
  * zdev/dracut: Consolidate device configuration
  * Bug Fixes:
  * dbginfo.sh: Fix relative path on script copy
  * libkmipclient: Fix build with libxml2-2.12.0
  * pvsecret: Fix panic if empty file is used as host key document
  * rust/pv: Fix 'elided_lifetimes_in_associated_constant' warning

  * Updated read_values.c (bsc#1219227)

  * Amended read_values for '-S' option (bsc#1217923)

Upgrade s390-tools to version 2.30: (jsc#PED-5783, jsc#PED-6785, jsc#PED-7136,
jsc#PED-6539, jsc#PED-4604, jsc#PED-6649, jsc#PED-7138 )

  * Add new tools / libraries:
  * lspai: Tool to display PAI counter sets
  * s390-tools: Provide a ShellCheck configuration
  * Changes of existing tools / libraries:
  * cpumf/pai: Add command line option for realtime scheduling
  * dbginfo.sh: enhance ethtool collection for ROCE
  * libutil/util_lockfile: add routine to return owning pid of file lock
  * lszcrypt: Improve lszcrypt output on SE guests
  * rust: Use a single workspace for all rust tools
  * zdev: limit the derivation of ZDEV_SITE_ID
  * zdump/df_s390: Update 'zgetdump -i' output with zlib info
  * zdump/dfi_s390: Support reading compressed s390_ext dumps
  * zipl/boot: Integrate zlib compression to single volume DASD dumper
  * zipl/boot: compile the bootloaders only if HOST_ARCH is s390x
  * zipl: Add --no-compress option to zipl command
  * zkey: Also check for deconfigured and check-stopped cards
  * Bug Fixes:
  * ap_tools/ap-check: handle get-attributes between pre and post event
  * libutil: fix util_file_read_*() using wrong format specifiers
  * rust/pv: fix Invalid write of size

Provide s390-tools on x86_64 to enable Secure Execution in the Cloud
(jsc#PED-578, jsc#PED-7136, and jsc#PED-7138)

  * Selected tools from the s390-tools package need to be made available on
    x86_64. This will enable the integration of IBM Z machines running Secure
    Execution in a cloud environment where users don't necessarily need to have
    an s390x environment.
  * genprotimg - (for building secure images)
  * pvsecret -
  * pvattest - (for external attestation)
  * pvextract-hdr -

  * Upgrade 390-tools from version 2.25.0 to version v2.29.0 (Latest)

  * General:
    * s390-tools now supports tools written in Rust.
    * Add compdb Makefile target to create 'compile_commands.json' to support LSP
    * backends in IDEs and editors
    * Add new tools / libraries:
  * rust/pv: Library for pv tools written in rust
  * rust/pvsecret: Tool to manage UV-secrets
  * Changes of existing tools:
  * dbginfo.sh: Global IFS variable
  * genprotimg: Add support for add-secret requests
  * genprotimg: Build debuginfo files for bootloader
  * hyptop: Add real SMT utilization field
  * hyptop: Allow users to set speedup factor
  * pvattest: Add yaml-output for verify command
  * zipl: Build debuginfo files for bootloader
  * Bug Fixes:
  * dump2tar: Fix truncated paths
  * zdev/dracut: fix kdump build to integrate with site support

Update to v2.28.0:

  * Changes of existing tools:
    * chzcrypt: Support for SE AP pass-through support
    * genprotimg: Add support for non-s390x architectures
    * lszcrypt: Support for SE AP pass-through support
    * zdev: Add support for autoquiesce related sysfs attributes
  * Bug Fixes:
  * ap_tools/ap-check: Handle missing 'matrix' and 'control_domains' attrs
  * ap_tools/ap-check: Hold ap config file lock over get attributes
  * s390-tools: Fix build for ppc64le
  * zdev: Add missing label in the udev-rules
  * zdev: Add proper value input for the ZDEV_SITE_ID key
  * zdev: Use rename-file to avoid any symlinks created
  * zipl/dump: fix ngdump dracut helper script

Update to v2.27.0:

  * Changes of existing tools:
    * s390-tools cross-compile and non-s390x support:
    * pkg-config is now mandatory for the build process
    * Add PKG_CONFIG Makefile variable to select pkg-config program;
    * default pkg-config or $(CROSS_COMPILE)pkg-config if
    * CROSS_COMPILE is set
    * Rename Makefile variable ARCH to HOST_ARCH. HOST_ARCH is the architecture that will run the produced (executable) objects
    * Add the Makefile variable BUILD_ARCH. BUILD_ARCH is the architecture of the build system. For each Makefile variable like CC, LINK, CPP, ... there is a suffixed version of it - e.g. CC_FOR_BUILD. This is useful for cross compiling, and this naming convention is very similar to the Meson convention (see https://mesonbuild.com/Reference-tables.html#environment-variables-per-machine).
    * Limit build targets for non-s390x architectures (pvattest)
    * dasdfmt: Fall back to full format if space release fails
    * dbginfo.sh: Add nstat for network and SNMP stats
    * dbginfo.sh: Rework crypto data collection
    * hyptop: Show thread util by default
    * zipl: Add support for list-directed IPL dump from ECKD DASD
  * Bug Fixes:
  * lszcrypt: Fix argument parsing
  * zdev/dracut: Fix out-of-memory (OOM) situations in the kdump crashkernel
    environment
  * ziomon/ziorep_config: Fix for SCSI devices of type disk without block dev
  * pvextract-hdr: Fix parsing issues on little-endian systems

Updat to v2.26.0:

  * Remove tools / libraries:
  * Remove vmconvert and libvmdump in favor of vmdump file support in zdump
  * Changes of existing tools:
  * ipl_tools: Add support for list-directed IPL from ECKD DASD
  * lszcrypt: Display hardware filtering support capability
  * vmur: Remove option -c for dump file conversion (See zdump changes)
  * zdev: Add zfcp ber_stop parameter handling
  * zdump: Add vmdump dfi for vmdump format to elf format
  * zkey: Support EP11 host library version
  * Bug Fixes:
  * zipl: Move dump parmline processing and verification
  * zipl/genprotimg: Various build improvements

  * Update read_values.c to support the new IBM z Processors

  * Updated SUSE's tools and their corresponding man pages (bsc#1216257)
  * ctc_configure
  * dasd_configure.opensuse
  * dasd_configure.8
  * dasd_configure.suse
  * mkdump.pl.opensuse
  * mkdump.pl.suse
  * qeth_configure
  * qeth_configure.8
  * zfcp_disk_configure
  * zfcp_disk_configure.8
  * zfcp_host_configure.8
  * zfcp_host_configure
  * Updated cputype script
  * Amended cputype to support the new IBM z Processors

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Micro for Rancher 5.4  
    zypper in -t patch SUSE-SLE-Micro-5.4-2024-2613=1

  * SUSE Linux Enterprise Micro 5.4  
    zypper in -t patch SUSE-SLE-Micro-5.4-2024-2613=1

  * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4  
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2613=1

  * openSUSE Leap 15.4  
    zypper in -t patch SUSE-2024-2613=1

  * SUSE Linux Enterprise Micro for Rancher 5.3  
    zypper in -t patch SUSE-SLE-Micro-5.3-2024-2613=1

  * SUSE Linux Enterprise Micro 5.3  
    zypper in -t patch SUSE-SLE-Micro-5.3-2024-2613=1

## Package List:

  * SUSE Linux Enterprise Micro for Rancher 5.4 (s390x)
    * libkmipclient1-2.31.0-150400.7.27.1
    * s390-tools-debuginfo-2.31.0-150400.7.27.1
    * libekmfweb1-debuginfo-2.31.0-150400.7.27.1
    * libkmipclient1-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-2.31.0-150400.7.27.1
    * libekmfweb1-2.31.0-150400.7.27.1
    * s390-tools-debugsource-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch)
    * s390-tools-genprotimg-data-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Micro 5.4 (s390x)
    * libkmipclient1-2.31.0-150400.7.27.1
    * s390-tools-debuginfo-2.31.0-150400.7.27.1
    * libekmfweb1-debuginfo-2.31.0-150400.7.27.1
    * libkmipclient1-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-2.31.0-150400.7.27.1
    * libekmfweb1-2.31.0-150400.7.27.1
    * s390-tools-debugsource-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Micro 5.4 (noarch)
    * s390-tools-genprotimg-data-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (s390x)
    * libkmipclient1-2.31.0-150400.7.27.1
    * s390-tools-debuginfo-2.31.0-150400.7.27.1
    * libkmipclient1-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-2.31.0-150400.7.27.1
    * libqc2-debuginfo-2.4.1-150400.3.3.1
    * osasnmpd-debuginfo-2.31.0-150400.7.27.1
    * libqc2-2.4.1-150400.3.3.1
    * qclib-devel-static-2.4.1-150400.3.3.1
    * qclib-debugsource-2.4.1-150400.3.3.1
    * osasnmpd-2.31.0-150400.7.27.1
    * s390-tools-chreipl-fcp-mpath-2.31.0-150400.7.27.1
    * s390-tools-hmcdrvfs-debuginfo-2.31.0-150400.7.27.1
    * qclib-2.4.1-150400.3.3.1
    * libekmfweb1-debuginfo-2.31.0-150400.7.27.1
    * libekmfweb1-2.31.0-150400.7.27.1
    * qclib-debuginfo-2.4.1-150400.3.3.1
    * qclib-devel-2.4.1-150400.3.3.1
    * s390-tools-zdsfs-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-zdsfs-2.31.0-150400.7.27.1
    * libekmfweb1-devel-2.31.0-150400.7.27.1
    * s390-tools-hmcdrvfs-2.31.0-150400.7.27.1
    * s390-tools-debugsource-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (noarch)
    * s390-tools-genprotimg-data-2.31.0-150400.7.27.1
  * openSUSE Leap 15.4 (s390x x86_64)
    * s390-tools-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-debugsource-2.31.0-150400.7.27.1
    * s390-tools-2.31.0-150400.7.27.1
  * openSUSE Leap 15.4 (s390x)
    * s390-tools-zdsfs-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-zdsfs-2.31.0-150400.7.27.1
    * qclib-2.4.1-150400.3.3.1
    * qclib-devel-static-2.4.1-150400.3.3.1
    * libekmfweb1-devel-2.31.0-150400.7.27.1
    * qclib-debugsource-2.4.1-150400.3.3.1
    * libkmipclient1-2.31.0-150400.7.27.1
    * osasnmpd-2.31.0-150400.7.27.1
    * libekmfweb1-debuginfo-2.31.0-150400.7.27.1
    * libkmipclient1-debuginfo-2.31.0-150400.7.27.1
    * libkmipclient1-devel-2.31.0-150400.7.27.1
    * osasnmpd-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-hmcdrvfs-2.31.0-150400.7.27.1
    * s390-tools-chreipl-fcp-mpath-2.31.0-150400.7.27.1
    * libekmfweb1-2.31.0-150400.7.27.1
    * s390-tools-hmcdrvfs-debuginfo-2.31.0-150400.7.27.1
    * libqc2-debuginfo-2.4.1-150400.3.3.1
    * libqc2-2.4.1-150400.3.3.1
    * qclib-debuginfo-2.4.1-150400.3.3.1
    * qclib-devel-2.4.1-150400.3.3.1
  * openSUSE Leap 15.4 (noarch)
    * s390-tools-genprotimg-data-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Micro for Rancher 5.3 (s390x)
    * libkmipclient1-2.31.0-150400.7.27.1
    * s390-tools-debuginfo-2.31.0-150400.7.27.1
    * libekmfweb1-debuginfo-2.31.0-150400.7.27.1
    * libkmipclient1-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-2.31.0-150400.7.27.1
    * libekmfweb1-2.31.0-150400.7.27.1
    * s390-tools-debugsource-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch)
    * s390-tools-genprotimg-data-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Micro 5.3 (s390x)
    * libkmipclient1-2.31.0-150400.7.27.1
    * s390-tools-debuginfo-2.31.0-150400.7.27.1
    * libekmfweb1-debuginfo-2.31.0-150400.7.27.1
    * libkmipclient1-debuginfo-2.31.0-150400.7.27.1
    * s390-tools-2.31.0-150400.7.27.1
    * libekmfweb1-2.31.0-150400.7.27.1
    * s390-tools-debugsource-2.31.0-150400.7.27.1
  * SUSE Linux Enterprise Micro 5.3 (noarch)
    * s390-tools-genprotimg-data-2.31.0-150400.7.27.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1214466
  * https://bugzilla.suse.com/show_bug.cgi?id=1216212
  * https://bugzilla.suse.com/show_bug.cgi?id=1216257
  * https://bugzilla.suse.com/show_bug.cgi?id=1217923
  * https://bugzilla.suse.com/show_bug.cgi?id=1219227
  * https://bugzilla.suse.com/show_bug.cgi?id=1222143
  * https://bugzilla.suse.com/show_bug.cgi?id=1222282
  * https://bugzilla.suse.com/show_bug.cgi?id=1222675
  * https://bugzilla.suse.com/show_bug.cgi?id=1223090
  * https://bugzilla.suse.com/show_bug.cgi?id=1226609
  * https://jira.suse.com/browse/PED-3223
  * https://jira.suse.com/browse/PED-3275
  * https://jira.suse.com/browse/PED-3284
  * https://jira.suse.com/browse/PED-3285
  * https://jira.suse.com/browse/PED-4604
  * https://jira.suse.com/browse/PED-578
  * https://jira.suse.com/browse/PED-5783
  * https://jira.suse.com/browse/PED-585
  * https://jira.suse.com/browse/PED-626
  * https://jira.suse.com/browse/PED-6539
  * https://jira.suse.com/browse/PED-6649
  * https://jira.suse.com/browse/PED-6785
  * https://jira.suse.com/browse/PED-7136
  * https://jira.suse.com/browse/PED-7138

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20240729/ccde32bb/attachment.htm>


More information about the sle-updates mailing list