This bug was fixed in the package s390-tools-signed - 2.12.0-0ubuntu3.8
---
s390-tools-signed (2.12.0-0ubuntu3.8) focal; urgency=medium
* Rebuild against 2.12.0-0ubuntu3.8 (LP: #2059303)
-- Frank Heimes Mon, 15 Apr 2024 20:57:27
+0200
--
You received this bug notification
This bug was fixed in the package s390-tools - 2.12.0-0ubuntu3.8
---
s390-tools (2.12.0-0ubuntu3.8) focal; urgency=medium
* Add d/p/lp2059303-genprotimg-support-Armonk-in-IBM-signing-key.patch
to fix Secure Execution tooling and accept new IBM host-key subject
locality.
This bug was fixed in the package s390-tools-signed - 2.20.0-0ubuntu3.3
---
s390-tools-signed (2.20.0-0ubuntu3.3) jammy; urgency=medium
* Rebuild against 2.20.0-0ubuntu3.3 (LP: #2059303)
-- Frank Heimes Mon, 15 Apr 2024 20:33:10
+0200
** Changed in: s390-tools (Ubuntu Focal)
This bug was fixed in the package s390-tools - 2.20.0-0ubuntu3.3
---
s390-tools (2.20.0-0ubuntu3.3) jammy; urgency=medium
* Add the following commits as patches:
- d/p/lp-2059303-genprotimg-support-Armonk-in-IBM-signing-key-subject.patch
-
This bug was fixed in the package s390-tools-signed - 2.29.0-0ubuntu2.2
---
s390-tools-signed (2.29.0-0ubuntu2.2) mantic; urgency=medium
* Rebuild against 2.29.0-0ubuntu2.2 (LP: #2059303)
-- Frank Heimes Mon, 15 Apr 2024 20:13:31
+0200
--
You received this bug notification
This bug was fixed in the package s390-tools - 2.29.0-0ubuntu2.2
---
s390-tools (2.29.0-0ubuntu2.2) mantic; urgency=medium
* Add the following commits as patches:
- d/p/lp-2059303-rust-pv-test-Code-Certificate-refactoring.patch
(excluded patching binary files
Thank you Steffen once again!
I'm updating the tags accordingly ...
** Tags removed: verification-needed verification-needed-focal
verification-needed-jammy verification-needed-mantic
** Tags added: verification-done verification-done-focal
verification-done-jammy verification-done-mantic
--
** Changed in: ubuntu-z-systems
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2059303
Title:
[UBUNTU 20.04] SE-tooling: New IBM host-key subject locality
Hello bugproxy, or anyone else affected,
Accepted s390-tools-signed into mantic-proposed. The package will build
now and be available at https://launchpad.net/ubuntu/+source/s390-tools-
signed/2.29.0-0ubuntu2.2 in a few hours, and then in the -proposed
repository.
Please help us by testing this
Hello bugproxy, or anyone else affected,
Accepted s390-tools into mantic-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/s390-tools/2.29.0-0ubuntu2.2 in a
few hours, and then in the -proposed repository.
Please help us by testing this new package.
Hi @seth-arnold,
I am not in-depth familiar with security related updates (since they happen
rarely for me, and if private-security are handled by the security team anyway).
"
My assumption is that these package updates should be published first to
-updates for autopkgtest testing, and once
I've been asked to try to help these updates along; I'm not on the SRU
team so I can't give concrete directions, only suggestions.
My assumption is that these package updates should be published first to
-updates for autopkgtest testing, and once they have passed testing and
phased to users, then
** Description changed:
SRU Justification:
[ Impact ]
* Symptom:
* There is an issue with the Secure Execution (SE) tooling,
especially the new IBM host-key subject locality,
that leads to the fact that on April 24 (z15) / March 29 (z16)
users will notice
Cool, thanks a lot Steffen!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2059303
Title:
[UBUNTU 20.04] SE-tooling: New IBM host-key subject locality
(s390-tools)
To manage notifications about
Marc and me, we had a side discussion and finally found the missing commits and
have a proper build for focal.
The build is available here:
https://launchpad.net/~fheimes/+archive/ubuntu/lp205930
and the debdiff(s) attached.
** Attachment added: "debdiff_focal.tgz"
Hi Marc,
I've added f5744b95db9, but I unfortunately still get the build errors:
https://launchpadlibrarian.net/724893134/buildlog_ubuntu-focal-s390x.s390-tools_2.12.0-0ubuntu3.9_BUILDING.txt.gz
(search for "error:")
--
You received this bug notification because you are a member of Ubuntu
Bugs,
** Description changed:
SRU Justification:
[ Impact ]
- * Symptom:
+ * Symptom:
-* There is an issue with the Secure Execution (SE) tooling,
- especially the new IBM host-key subject locality,
- that leads to the fact that on April 24 (z15) / March 29 (z16)
-
For focal the commit d14e7593cc6
(https://github.com/ibm-s390-linux/s390-tools/commit/d14e7593cc6380911ca42b09e11c53477ae13d5c)
does not properly build and the logs show a few errors:
https://launchpadlibrarian.net/723098720/buildlog_ubuntu-focal-s390x.s390-tools_2.12.0-0ubuntu3.8_BUILDING.txt.gz
s390-tools and s390-tools-signed debdiffs for 22.04/jammy
** Attachment added: "debdiff_jammy.tgz"
https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/2059303/+attachment/5765796/+files/debdiff_jammy.tgz
--
You received this bug notification because you are a member of Ubuntu
Bugs,
Hi Steffen,
many thanks for the tests, that's highly appreciated!
I'm glad to see that we are fine with noble, mantic and jammy.
It was btw. good to pick the version from the noble archive, since it's in
beta).
(And btw. we usually do not alter DISTRELEASE in common.mak.)
I'm uploading first of
s390-tools and s390-tools-signed debdiffs for 23.10/mantic
** Attachment added: "debdiff_mantic.tgz"
https://bugs.launchpad.net/ubuntu/+source/s390-tools/+bug/2059303/+attachment/5765782/+files/debdiff_mantic.tgz
--
You received this bug notification because you are a member of Ubuntu
Bugs,
** Changed in: ubuntu-z-systems
Status: New => In Progress
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2059303
Title:
[UBUNTU 20.04] SE-tooling: New IBM host-key subject locality
** Tags removed: targetmilestone-inin---
** Tags added: targetmilestone-inin2004
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2059303
Title:
[UBUNTU 20.04] SE-tooling: New IBM host-key subject
This bug was fixed in the package s390-tools-signed - 2.31.0-0ubuntu5
---
s390-tools-signed (2.31.0-0ubuntu5) noble; urgency=medium
* Rebuild against 2.31.0-0ubuntu5 (LP: #2058944, LP: #2059303)
-- Frank Heimes Tue, 02 Apr 2024 12:55:52
+0200
** Changed in: s390-tools-signed
This bug was fixed in the package s390-tools - 2.31.0-0ubuntu5
---
s390-tools (2.31.0-0ubuntu5) noble; urgency=medium
* Add the following commits as patches:
- d/p/lp-2059303-rust-pv-test-Code-Certificate-refactoring.patch
(excluded patching binary files
Hi Steffen,
thanks for checking the updated packages.
Indeed, I had to restart the build of the s390-tools-signed packages for
mantic/23.10, /jammy/22.04 and focal/20.04.
These build will be complete in an hour or so (so well before Monday).
Since the updates need to be done starting with the
Builds finally completed:
noble: https://launchpad.net/~fheimes/+archive/ubuntu/lp2059303
mantic, jammy, focal: https://launchpad.net/~fheimes/+archive/ubuntu/test
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Description changed:
+ SRU Justification:
+
+ [ Impact ]
+
+ * Symptom:
+
+* There is an issue with the Secure Execution (SE) tooling,
+ especially the new IBM host-key subject locality,
+ that leads to the fact that on April 24 (z15) / March 29 (z16)
+ users will notice
Meanwhile I've navigated through the challenges in noble and have a successful
PPA build here:
launchpad.net/~fheimes/+archive/ubuntu/lp2059303
and the s390-tools and the s390-tools-signed debdiffs attached.
** Attachment added: "debdiffs.tgz"
Well, I already had a hard time to get the requested commits applied to
noble (which is on 2.31.0).
I figured out that:
1) commit f6c6f0cc712433221fb0588c754e0d09884453dd ("rust/pv/test: Code +
Certificate refactoring") is needed on top as pre-requisite, otherwise the
other patches do not
** Also affects: s390-tools (Ubuntu Mantic)
Importance: Undecided
Status: New
** Also affects: s390-tools-signed (Ubuntu Mantic)
Importance: Undecided
Status: New
** Also affects: s390-tools (Ubuntu Focal)
Importance: Undecided
Status: New
** Also affects:
** Package changed: linux (Ubuntu) => s390-tools (Ubuntu)
** Also affects: s390-tools-signed (Ubuntu)
Importance: Undecided
Status: New
** Also affects: ubuntu-z-systems
Importance: Undecided
Status: New
** Changed in: ubuntu-z-systems
Assignee: (unassigned) => Skipper
32 matches
Mail list logo
