# Recommended update for libnvme, nvme-cli Announcement ID: SUSE-RU-2024:4269-1 Release Date: 2024-12-09T16:34:42Z Rating: moderate References: * bsc#1216982 * bsc#1226216 * bsc#1232616 * bsc#1234217 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has four fixes can now be installed. ## Description: This update for libnvme, nvme-cli fixes the following issues: * Version update (1.8+79.g69e7772) * docs: update check-tls-key arguments (bsc#1216982, bsc#1226216). * docs: update gen-tls-key arguments (bsc#1216982, bsc#1226216). * docs: update TLS options (bsc#1216982, bsc#1226216). * fabrics: add support to connect to accept a PSK command line and configuration (bsc#1216982, bsc#1226216). * fabrics: fix map error level in __nvmf_add_ctrl (bsc#1216982, bsc#1226216). * fabrics: add ctrl connect interface (bsc#1216982, bsc#1226216). * fabrics: use hex numbers when generating command line options (bsc#1216982, bsc#1226216). * fabrics: rename first argument for argument macros (bsc#1216982, bsc#1226216). * fabrics: do not attempt to import keys if tls is not enabled (bsc#1216982, bsc#1226216). * fabrics: skip namespace scan for fabric commands (bsc#1232616). * json: move keystore operations out of the JSON parser (bsc#1216982, bsc#1226216). * json: do not escape strings when printing the configuration (bsc#1216982, bsc#1226216). * linux: do not do any keyring ops when no key is provided (bsc#1216982, bsc#1226216). * linux: do not return w/o OpenSSL support enabled (bsc#1216982, bsc#1226216). * linux: fix derive_psk_digest OpenSSL 1.1 version (bsc#1216982, bsc#1226216). * linux: fixup PSK HMAC type '0' handling (bsc#1216982, bsc#1226216). * linux: handle key import correctly (bsc#1216982, bsc#1226216). * linux: export keys to config (bsc#1216982, bsc#1226216). * linux: only return the description of a key (bsc#1216982, bsc#1226216). * linux: use ssize_t as return type for nvme_identity_len (bsc#1216982, bsc#1226216). * linux: reorder variable declarations (bsc#1216982 bsc#1226216 (bsc#1216982, bsc#1226216). * linux: Remove the use of OpenSSL Engine API. * linux: add import/export function for TLS pre-shared keys (bsc#1216982, bsc#1226216). * netapp-smdev: remove redundant code (bsc#1234217). * netapp-smdev: add verbose output (bsc#1234217). * netapp-smdev-doc: add verbose details (bsc#1234217). * netapp-ontapdev: fix JSON output for nsze and nuse (bsc#1234217). * netapp-ontapdev: fix fw version handling (bsc#1234217). * netapp-ontapdev-doc: add verbose details (bsc#1232616). * netapp-ontapdev: add verbose output (bsc#1232616). * nvme: use unsigned char for hmac and identity (bsc#1216982, bsc#1226216). * nvme: add support to append TLS PSK to keyfile for check-tls-key (bsc#1216982, bsc#1226216). * nvme: return correct error code in append_keyfile (bsc#1216982, bsc#1226216). * nvme: add support to add derive TLS PSK to keyfile (bsc#1216982, bsc#1226216). * nvme: rename identity to version (bsc#1216982, bsc#1226216). * nvme: set file permission for keyfile to owner only (bsc#1216982, bsc#1226216). * nvme: export tls keys honoring version and hmac (bsc#1216982, bsc#1226216). * nvme-netapp: update err messages (bsc#1234217). * nvmf-keys: add udev rule to import tls keys (bsc#1216982, bsc#1226216). * test: add pre-shared key json tests (bsc#1216982, bsc#1226216). * test: extend psk to test new 'versioned' API (bsc#1216982, bsc#1226216). * test: add test case for importing/exporting PSKs (bsc#1216982, bsc#1226216). * test: make config-diff more flexible to use (bsc#1216982, bsc#1226216). * tree: optionally skip namespaces during scanning (bsc#1232616). * tree: do no export tls keys when not provided by user (bsc#1216982, bsc#1226216). * tree: read tls_configured_key and tls_keyring from sysfs (bsc#1216982, bsc#1226216). * tree: move dhchap and tls sysfs parser into separate functions (bsc#1216982, bsc#1226216). * tree: add getter/setters for TLS PSK (bsc#1216982, bsc#1226216). * util: added error code for ENOKEY (bsc#1216982, bsc#1226216). * util: Add string constant for ENVME_CONNECT_IGNORED. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4269=1 openSUSE-SLE-15.6-2024-4269=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4269=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libnvme-devel-1.8+79.g69e7772-150600.3.12.2 * nvme-cli-debugsource-2.8+87.g29df38e-150600.3.12.2 * libnvme-mi1-1.8+79.g69e7772-150600.3.12.2 * libnvme-mi1-debuginfo-1.8+79.g69e7772-150600.3.12.2 * libnvme1-debuginfo-1.8+79.g69e7772-150600.3.12.2 * libnvme1-1.8+79.g69e7772-150600.3.12.2 * python3-libnvme-debuginfo-1.8+79.g69e7772-150600.3.12.2 * nvme-cli-2.8+87.g29df38e-150600.3.12.2 * nvme-cli-debuginfo-2.8+87.g29df38e-150600.3.12.2 * libnvme-debugsource-1.8+79.g69e7772-150600.3.12.2 * python3-libnvme-1.8+79.g69e7772-150600.3.12.2 * libnvme-debuginfo-1.8+79.g69e7772-150600.3.12.2 * openSUSE Leap 15.6 (noarch) * nvme-cli-bash-completion-2.8+87.g29df38e-150600.3.12.2 * nvme-cli-zsh-completion-2.8+87.g29df38e-150600.3.12.2 * nvme-cli-regress-script-2.8+87.g29df38e-150600.3.12.2 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libnvme-devel-1.8+79.g69e7772-150600.3.12.2 * nvme-cli-debugsource-2.8+87.g29df38e-150600.3.12.2 * libnvme-mi1-1.8+79.g69e7772-150600.3.12.2 * libnvme-mi1-debuginfo-1.8+79.g69e7772-150600.3.12.2 * libnvme1-debuginfo-1.8+79.g69e7772-150600.3.12.2 * libnvme1-1.8+79.g69e7772-150600.3.12.2 * nvme-cli-2.8+87.g29df38e-150600.3.12.2 * nvme-cli-debuginfo-2.8+87.g29df38e-150600.3.12.2 * python3-libnvme-debuginfo-1.8+79.g69e7772-150600.3.12.2 * libnvme-debugsource-1.8+79.g69e7772-150600.3.12.2 * python3-libnvme-1.8+79.g69e7772-150600.3.12.2 * libnvme-debuginfo-1.8+79.g69e7772-150600.3.12.2 * Basesystem Module 15-SP6 (noarch) * nvme-cli-bash-completion-2.8+87.g29df38e-150600.3.12.2 * nvme-cli-zsh-completion-2.8+87.g29df38e-150600.3.12.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1216982 * https://bugzilla.suse.com/show_bug.cgi?id=1226216 * https://bugzilla.suse.com/show_bug.cgi?id=1232616 * https://bugzilla.suse.com/show_bug.cgi?id=1234217