<div class="container">
<h1>Recommended update for s390-tools</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2026:23977-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-10-01T11:10:40Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1273204">bsc#1273204</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1273205">bsc#1273205</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1273206">bsc#1273206</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1273207">bsc#1273207</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275476">bsc#1275476</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Micro 6.2</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that has five fixes can now be installed.</p>
<h2>Description:</h2>
<p>This update for s390-tools fixes the following issues:</p>
<p>Changes in s390-tools:</p>
<ul>
<li>Upgrade to version 2.44.1 (bsc#1273204, bsc#1273205, bsc#1273206, bsc#1273207, bsc#1275476):
For Linux kernel version: 7.2<ul>
<li>Changes of existing tools:<ul>
<li>cpumf/lshwc: Add -c as short option for --counters</li>
<li>cpumf/lspai: Handle CPU hotplug gracefully</li>
<li>dbginfo.sh: Change grep for OS name</li>
<li>dbginfo.sh: Change tar generation via temp file</li>
<li>dbginfo.sh: Correct dump counter</li>
<li>dbginfo.sh: Detect the openCryptoki STDLL directory at runtime</li>
<li>dbginfo.sh: Redirect stderr on command existence checks</li>
<li>dbginfo.sh: Replace deprecated backtick command substitution</li>
<li>dbginfo.sh: Secure the directory input variable</li>
<li>zipl: Detect and display partition table type for disk and device</li>
</ul>
</li>
<li>Bug Fixes:<ul>
<li>cmsfs-fuse: Fix out-of-bounds access when reading variable-length files</li>
<li>cpumf/lscpumf: Fix exit status and error reporting</li>
<li>cpumf/lshwc: Fix --allcpu to --all in man page</li>
<li>cpumf/lspai: Add input validation for interval parameter</li>
<li>cpumf/lspai: Fix --allcpu to --all in man page</li>
<li>cpumf/lspai: Fix integer overflow in file descriptor calculation</li>
<li>cpumf/lspai: Fix output formatting with minimum indent</li>
<li>dasdview: Fix buffer overflow in dasdview_read_vtoc()</li>
<li>dumpconf: Harden locking during delayed activation to prevent symlink attacks</li>
<li>fdasd: Fix potential buffer overflow in fdasd_change_part_type()</li>
<li>ipl_tools: Fix buffer overflow vulnerabilities in chreipl and is_lpar()</li>
<li>ip_watcher: Use mktemp for cleanup files to avoid collisions</li>
<li>libkmipclient: Fix NULL pointer dereference in kmip_v2_attr_from_v1_attr()</li>
<li>libkmipclient: Fix heap buffer overflow</li>
<li>libutil/util_lockfile: Prevent buffer overflow in lockfile handling</li>
<li>libzds: Add bounds checking and validate used_bytes in PDS directory parsing</li>
<li>pvattest: Write attestation request private key (arpk) with 0600 permissions</li>
<li>pvebc: Fix executable permission on sel-ebc-modules.conf</li>
<li>pvics: Fix incorrect exit values for --version and --help options</li>
<li>pvsecret: Write secret with 0600 permissions</li>
<li>sclpdbf: Harden against invalid trace data</li>
<li>vmur: Fix buffer over-read in get_minor()</li>
<li>zdump/dfi_s390: Add a check for zlib entry size in the dump header</li>
<li>zdump/dfi_s390: Fix out-of-bounds upon dump entry decompression</li>
<li>zdump/dfo_elf: Fix 32-bit truncation in ELF header allocation size</li>
<li>zdump: Reject multi-volume dumps with out-of-range vol_cnt</li>
<li>ziomon/ziomon_zfcpdd: Validate message lengths before processing</li>
<li>ziomon/ziorep_config: Replace unsafe open() and regex match with safer idioms</li>
<li>ziomon: Validate message layout and aggregate message lengths before processing</li>
<li>zipl: Fix memory leak in free_bootloader()</li>
<li>zipl: Replace popen(3) with safer invocation for targetbase scripts and ngdump</li>
<li>zkey-ekmfweb: Fix insecure default: TLS host name verification now enabled by default</li>
<li>zkey-kmip: Fix insecure default: TLS host name verification now enabled by default</li>
<li>zkey: Fix memory leaks when generating keys or reenciphering integrity volumes</li>
<li>zkey: Harden 'zkey kms unbind' command against symlink traversal</li>
<li>zkey: Harden KMS config directory handling against symlink attacks</li>
<li>zkey: Harden KMS plugin file handling against symlink attacks</li>
<li>zkey: Install initrd integration with the configured plugin directory</li>
</ul>
</li>
</ul>
</li>
<li>Full Changelog: v2.44.0...v2.44.1:
https://github.com/ibm-s390-linux/s390-tools/compare/v2.44.0...v2.44.1</li>
<li>Removed obsolete patches for Security vulnerabilities for zkey and friends<ul>
<li>zkey: Harden KMS config directory handling - Commit <code>0eef784</code></li>
<li>zkey: Harden 'zkey kms unbind' command - Commit <code>1b90d15</code></li>
<li>zkey/ekmfweb, zkey/kmip: Harden KMS plugin file handling - Commit <code>bc81c32</code></li>
</ul>
</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Micro 6.2
<br/>
<code>zypper in -t patch SUSE-SL-Micro-6.2-1799</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Micro 6.2 (s390x)
<ul>
<li>libekmfweb1-debuginfo-2.44.1-160000.1.1</li>
<li>libkmipclient1-2.44.1-160000.1.1</li>
<li>s390-tools-debugsource-2.44.1-160000.1.1</li>
<li>libkmipclient1-debuginfo-2.44.1-160000.1.1</li>
<li>libekmfweb1-2.44.1-160000.1.1</li>
<li>s390-tools-2.44.1-160000.1.1</li>
<li>s390-tools-debuginfo-2.44.1-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Micro 6.2 (noarch)
<ul>
<li>s390-tools-chreipl-fcp-mpath-2.44.1-160000.1.1</li>
<li>s390-tools-genprotimg-data-2.44.1-160000.1.1</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1273204">https://bugzilla.suse.com/show_bug.cgi?id=1273204</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1273205">https://bugzilla.suse.com/show_bug.cgi?id=1273205</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1273206">https://bugzilla.suse.com/show_bug.cgi?id=1273206</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1273207">https://bugzilla.suse.com/show_bug.cgi?id=1273207</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1275476">https://bugzilla.suse.com/show_bug.cgi?id=1275476</a>
</li>
</ul>
</div>