Applied a patch for CVE-2026-23893

Modified the .spec file for Immutable Mode (jsc#PED-14798)

openCryptoki.changes

@@ -1,24 +1,20 @@
 -------------------------------------------------------------------
-Thu Jan 22 16:34:43 UTC 2026 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
+Mon Jan 26 11:23:44 UTC 2026 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
 
 - Applied a patch (bsc#1257116,  CVE-2026-23893)
  * openCryptoki-CVE-2026-23893-commit-5e6e4b4.patch
 
 -------------------------------------------------------------------
-Wed Jan 14 13:06:33 UTC 2026 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
+Fri Jan 16 08:33:23 UTC 2026 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
 
 - Applied a patch (bsc#1256673, CVE-2026-22791)
   * openCryptoki-CVE-2026-22791-commit-e37e912.patch
-
--------------------------------------------------------------------
-Thu Jan  8 10:14:17 UTC 2026 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
-
 - Modified the .spec file for Immutable Mode (jsc#PED-14798) 
 
 -------------------------------------------------------------------
 Wed Nov 12 09:04:02 UTC 2025 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
 
-- Upgrade openCryptoki to 3.26
+- Upgrade openCryptoki to 3.26 (jsc#PED-14609) 
   * Soft: Add support for RSA keys up to 16K bits.
   * CCA: Add support for RSA keys up to 8K bits (requires CCA v8.4 or v7.6 or later).
   * p11sak: Add support for generating RSA keys up to 16K bits.

openCryptoki.spec

@@ -26,16 +26,6 @@
 %define pkcs_group pkcs11
 %define oc_cvs_tag opencryptoki
 
-%ifarch s390 s390x
-    %define ocki_conf_flags --enable-icatok --enable-ccatok --enable-ep11tok --enable-pkcsep11_migrate
-%else
-    %ifnarch i586
-        %define ocki_conf_flags --disable-icatok --enable-ccatok --disable-ep11tok --disable-pkcsep11_migrate --enable-pkcscca_migrate
-    %else
-        %define ocki_conf_flags --disable-icatok --disable-ccatok --disable-ep11tok --disable-pkcsep11_migrate --disable-pkcscca_migrate
-    %endif
-%endif
-
 Name:           openCryptoki
 Version:        3.26.0
 Release:        0
@@ -166,7 +156,15 @@ cp %{SOURCE2} .
 %ifarch aarch64  # Apparently, gcc for aarch64 doesn't support transactional memory
     --enable-locks \
 %endif
-    %{ocki_conf_flags}
+%ifarch s390 s390x
+    --enable-icatok --enable-ccatok --enable-ep11tok --enable-pkcsep11_migrate
+%else
+%ifnarch i586
+    --disable-icatok --enable-ccatok --disable-ep11tok --disable-pkcsep11_migrate --enable-pkcscca_migrate
+%else
+    --disable-icatok --disable-ccatok --disable-ep11tok --disable-pkcsep11_migrate --disable-pkcscca_migrate
+%endif
+%endif
 
 make %{?_smp_mflags}
 dos2unix doc/README.ep11_stdll