diff --git a/libica-4.1.1.tar.gz b/libica-4.1.1.tar.gz
new file mode 100644
index 0000000..a935b30
--- /dev/null
+++ b/libica-4.1.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1abb8a2d0dd061dc7741f02a26b07ec897309e60a3866d20c4f1bf6c094d4706
+size 559797
diff --git a/libica.changes b/libica.changes
index 24a66d0..0d97e1f 100644
--- a/libica.changes
+++ b/libica.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Tue Oct 11 20:32:12 UTC 2022 - Mark Post <mpost@suse.com>
+
+- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
+  v4.1.1
+   - [PATCH] Fix aes-xts multi-part operations
+     [PATCH] Fix make dist
+  v4.1.0
+   - [FEATURE] FIPS: make libica FIPS 140-3 compliant
+     [FEATURE] New API function ica_ecdsa_sign_ex()
+     [FEATURE] New icainfo output option -r
+   - [PATCH] Various bug fixes
+- Removed the following obsolete files:
+  baselibs.conf
+  icaioctl.h
+
 -------------------------------------------------------------------
 Mon Sep 12 19:09:59 UTC 2022 - Mark Post <mpost@suse.com>
 
diff --git a/libica.spec b/libica.spec
index 625a0c3..ff08ccd 100644
--- a/libica.spec
+++ b/libica.spec
@@ -22,21 +22,18 @@
 %endif
 
 Name:           libica
-Version:        4.0.3
+Version:        4.1.1
 Release:        0
 Summary:        Library interface for the IBM Cryptographic Accelerator device driver
 License:        CPL-1.0
 Group:          Hardware/Other
 URL:            https://github.com/opencryptoki/libica
 Source:         https://github.com/opencryptoki/%{name}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
-# The icaioctl.h file came from https://sourceforge.net/p/opencryptoki/icadd/ci/master/tree/
-Source1:        icaioctl.h
-Source2:        README.SUSE
-Source3:        sysconfig.z90crypt
-Source4:        z90crypt
-Source5:        z90crypt.service
-Source6:        baselibs.conf
-Source7:        %{name}-rpmlintrc
+Source1:        README.SUSE
+Source2:        sysconfig.z90crypt
+Source3:        z90crypt
+Source4:        z90crypt.service
+Source5:        %{name}-rpmlintrc
 Patch01:        libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
 Patch99:        libica-sles15sp5-FIPS-hmac-key.patch
 
@@ -116,9 +113,6 @@ the libica library.
 %autosetup -p 1
 
 %build
-mkdir -p include/linux/
-cp %{SOURCE1} include/linux/
-
 autoreconf --force --install
 %configure CPPFLAGS="-Iinclude -fPIC" CFLAGS="%{optflags} -fPIC" \
   --enable-fips
@@ -136,15 +130,15 @@ mkdir -p %{buildroot}%{_includedir}
 cp -p include/ica_api.h %{buildroot}%{_includedir}
 mkdir -p %{buildroot}%{_sbindir}
 ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rcz90crypt
-install -D %{SOURCE3} %{buildroot}%{_fillupdir}/sysconfig.z90crypt
-install -D %{SOURCE4} %{buildroot}%{_prefix}/lib/systemd/scripts/z90crypt
-install -D -m 644 %{SOURCE5} %{buildroot}%{_prefix}/lib/systemd/system/z90crypt.service
+install -D %{SOURCE2} %{buildroot}%{_fillupdir}/sysconfig.z90crypt
+install -D %{SOURCE3} %{buildroot}%{_prefix}/lib/systemd/scripts/z90crypt
+install -D -m 644 %{SOURCE4} %{buildroot}%{_prefix}/lib/systemd/system/z90crypt.service
 # It is installed 444 and then the __os_install_post cannot update it once the debuginfo is stripped
 # We need it early because there is %{buildroot}/%{_libdir}/.*.so.%{major}.hmac symlink pointing at it
 # and the dangling symlink test would fail
 chmod 644 %{buildroot}/%{_libdir}/.*.so.%{version}.hmac
 
-cp -a %{SOURCE2} .
+cp -a %{SOURCE1} .
 rm -vf %{buildroot}%{_libdir}/libica*.la
 rm -f %{buildroot}%{_datadir}/doc/libica/*
 rmdir %{buildroot}%{_datadir}/doc/libica