v2.16.0

For Linux kernel version: 5.10 / 5.11

Add new tool:

• hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)

Changes of existing tools:

• genprotimg: Add host-key document verification support
• genprotimg: boot: Make boot loader -march=z900 compatible
• libekmfweb: Make install directory for shared libraries configurable
• lsdasd: Add FC Endpoint Security information
• make: Add address sanitizer support
• netboot: Add version information to scripts
• netboot: Bump busybox version in pxelinux.0 build
• zdev: Add FC Endpoint Security information for DASD devices
• zdev: Add build option to update initial RAM-disk by default
• zkey-ekmfweb: Avoid sequence number clash when generating keys
• zkey/zkey-ekmfweb: Install KMS plugins into configurable location
• zkey: Add support to store LUKS2 dummy passphrase in key repository

Bug Fixes:

• dasdfmt: Fix segfault when an incorrect option is specified
• genprotimg: Fix several build issues
• genprotimg: Require argument for 'ramdisk' and 'parmfile' options
• zcryptstats: Fix handling of partial results with many domains
• zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
• zipl/boot: Fix memory use after free in stage2
• zipl/boot: Fix potential heap overflow in stage2
• zipl: Fix reading 4k disk's geometry

v2.15.1

For Linux kernel version: 5.9

Changes of existing tools:

• lsstp: Improve wording and fix typos in man page
• zkey: Ensure zkey and friends are skipped with HAVE_OPENSSL=0
• zkey: Add library versioning for libekmfweb and zkey-ekmfweb
• libutil: Add function to determine base device of a partition block device

Bug Fixes:

• dasdfmt: Fix bad file descriptor error when running on symlinks
• libdasd: Fix dasd_get_host_access_count()
• zipl: Fix multivolume dump
• zgetdump: Fix device node determination via sysfs to work with multivolume again
• genprotimg/boot: Fix build by disabling SSP
• zipl/boot: Fix build by disabling SSP

v2.15.0

For Linux kernel version: 5.9

Add new tool:

• lsstp: A small utility to display the Server Time Protocol (STP) information present in sysfs

Changes of existing tools:

• dumpconf: support NVMe dump/reipl device
• ipl_tools: support clear attribute for nvme re-IPL
• zcrypt: Support new config state with lszcrypt and chzcrypt
• zkey: Add support for key management system plugins
  including the KMS commands:
  bind, unbind, info, configure, rencipher, list, import, refresh
• zkey: Add EKMFWeb support to remotely generate secure keys
• libekmfweb: Add new EKMFWeb client library
• libutil: Add util_file_read_va()
• libutil: Add util_file_read_i()/util_file_read_ui()

Bug Fixes:

• cpumf: Fix version and help printout when CPUMF is not installed
• ziomon/ziorep_printers: fix virtual adapter CSV output
• zipl: Fix Error when title is not the first field in BLS file

v2.14.0

For Linux kernel version: 5.7 / 5.8

Changes of existing tools:

• cpacfstats: Add ECC counters
• dbginfo: Added collection of /proc/softirqs
• ipl-tools: Add nvme device support to lsreipl/chreipl
• zdsfs: Add coordinated read access
• libzds: Add curl interface to access zosmf rest api
• util_opt: Change util_opt_init() to honor current command, if set

Bug Fixes:

• lsluns: Try harder to find udevadm
• mon_tools: Update udevadm location
• zipl: Fix NVMe partition and base device detection
• zipl/stage3: Correctly handle diag308 response code
• znetconf: Introduce better ways to locate udevadm

v2.13.0

For Linux kernel version: 5.5 / 5.6

Add new tool:

• genprotimg: Add genprotimg to create protected virtualization images
• genprotimg: Add sample script to verify host keys

Changes of existing tools:

• dbginfo: Gather bridge related data (using 'bridge')
• dbginfo: Removed collection of /var/log/opencryptoki/
• dbginfo: collect softnet_stat
• dbginfo: gather ethtool output for per-queue coalescing
• ipl_tools: Support clear attribute for FCP and CCW re-IPL
• zdev: Report FC Endpoint Security of zfcp devices
• zdev/dracut/95zdev/module-setup.sh: Add ctcm kernel module
• cpumf/data: Add new deflate counters for IBM z15
• zkey: Add support for EP11 secure keys
• zpcictl: Initiate recover after reset
• zipl: Add support for NVMe devices
• zipl: A multitude of code and stability improvements

Bug Fixes:

• zipl: Prevent endless loop during IPL
• zipl/libc: Fix potential buffer overflow in printf
• zkey: Fix listing of keys on file systems reporting DT_UNKNOWN
• zkey: Fix display of clear key size for XTS, CCA-AESCIPHER, and EP11-AES XTS keys

v2.12.0

For Linux kernel version: 5.4

Changes of existing tools:

• dbginfo: Gather qdisc related data (using 'tc')
• dbginfo: Gather extended network statistics (using 'ip link')
• dbginfo: Collect all files under /usr/lib/systemd/system/
• cpumf/cpumf_helper: Add IBM z15 machine name
• zkey: Display MKVP when validating a secure key
• zkey: Cross check APQNs when generating, validating, or importing secure keys,
  and when changing APQN associations
• zkey: Check crypto card level during APQN cross checking
• zkey: Add support for generating, validating, and re-enciphering AES CIPHER keys
• zkey-cryptsetup: Add --to-new and --from-old options
• zkey-cryptsetup: Allow setkey to set different key types
• lszcrypt/chzcrypt: CEX7S exploitation support
• zcryptstats: Add support for CEX7 crypto card
• zipl: Ship a minimal zipl.conf
• zipl: Add value of target= as search path for BLS case

Bug Fixes:

• dasdview: Fix exit status in error cases
• zipl: Fix various compile warnings
• zipl: Fix dependency generation in zipl/boot
• zipl: Fix entry point for stand-alone kdump
• zipl: Add missing options to help output

v2.11.0

For Linux kernel version: 5.3

Changes of existing tools:

• dasdfmt: Add support for thin-provisioned volumes
• lsdasd: Add support for thin-provisioned volumes
• libdasd: Provide function to utilise release space ioctl
• libdasd: Provide function to read ese sysfs attribute
• dbginfo: Add lspci (PCI devices) and smc_dbg (SMC sockets)
• dbginfo: Gather ethtool related data

Bug Fixes:

• zipl: Fix freeing of uninitialized pointer
• zipl: Set correct secure IPL default value

v2.10.0

For Linux kernel version: 5.2

Changes of existing tools:

• zdev: Add zfcp dix parameter handling
• cpumf: Add support for CPU-Measurement Facility counters SVN 6

Bug Fixes:

• libutil: Add functions to test path is read/write-only
• zdev: Fix reporting of read-only sysfs attributes
• zdev: Improve handling of invalid udev rules
• zipl: Fix stfle zero padding
• zipl: Fix build issues
• zipl: Remove trailing spaces from the fields defined in BLS files
• zipl: Do not overwrite BOOT_IMAGE entry
• zkey: Fix auto-detection of clear key bitsize for XTS keys

v2.9.0

For Linux kernel version: 5.0 / 5.1

Add new tool:

• zcryptstats: Add zcryptstats to display usage statistics of IBM Crypto Express adapters

Changes of existing tools:

• lszfcp: New command line option to show module parameters
• lszfcp: Sdev attributes for scsi_disk, block, integrity, queue, iosched
• lszfcp: Add new output marker for non-good SCSI devices (luns)
• lszfcp: Add new output marker for non-good fc_rports
• lszfcp: Clean up whitespace (mixed indentation, trailing)
• lschp: Add support for specifying a CHPID
• zipl: Add secure boot capabilities
• zkey: Add common passphrase options for cryptsetup and crypttab
• zkey: Add batch-mode option to cryptsetup and zkey-cryptsetup
• libu2s: Remove the entire library and provide more robust functionality
  in libdasd and libutil instead

Bug Fixes:

• lszfcp: Allow to show zfcp_units without associated SCSI device
• lszfcp: Attribute details for: css, zfcp_port, zfcp_unit
• lszfcp: Allow to also enumerate FCP device that have never been online
• lszfcp: Fix error message if no zfcp-attached SCSI device found
• lszfcp: Fix to show defunct FCP devices again
• lszfcp: Fix to show non-good target ports again
• lszfcp: Fix missing block & sg device output without CONFIG_SYSFS_DEPRECATED
• lszfcp: New command line option for extended output format
• zfcpdbf: Warn about ambiguous payload records with dup reqid & payarea
• zpcictl: Check for regular directory to prevent possible buffer overflow

v2.8.0

For Linux kernel version: 4.20

Changes of existing tools:

• Switch to using /run directory instead of the legacy /var/run
• zkey: Add --pbkdf pbkdf2 to generated cryptsetup luksFormat command
• zdsfs: Add online VTOC refresh
• pkey: Support autoloading kernel pkey module

Bug Fixes:

• zkey: Avoid EPERM on key change if user is not owner of key file
• cpumf/cpumf_helper: Always return list reference for --sfb-size