rpm/libica
SHA256
1
0
Fork 0
forked from pool/libica
Code Pull Requests Activity

Accepting request 1244061 from security:tls

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/1244061
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libica?expand=0&rev=40
This commit is contained in:
Ana Guerrero
2025-02-07 22:05:25 +00:00
committed by Git OBS Bridge
parent ba11b9a144 a309387740
commit 2d36735794
3 changed files with 39 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
libica-fips-update-Fix-bug-in-condition-logic.patch Normal file
View File

@@ -0,0 +1,30 @@
From ff35d0226e72251ae495913aeb758bd141a3db19 Mon Sep 17 00:00:00 2001
From: Joerg Schmidbauer <jschmidb@de.ibm.com>
Date: Wed, 18 Dec 2024 17:09:33 +0100
Subject: [PATCH] Fix bug in condition logic
This bug causes an incorrect indication of the availability of algos
in fips mode.
Fixes: https://github.com/opencryptoki/libica/commit/a9288f578b402851d41da579a78e3cbd9d1bab98
Signed-off-by: Joerg Schmidbauer <jschmidb@de.ibm.com>
---
src/s390_crypto.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/s390_crypto.c b/src/s390_crypto.c
index 58e082a..e05c7e7 100644
--- a/src/s390_crypto.c
+++ b/src/s390_crypto.c
@@ -709,8 +709,8 @@ int s390_get_functionlist(libica_func_list_element *pmech_list,
* approved.
* - We are in an error state.
* */
- if (((fips & ICA_FIPS_MODE) && !fips_approved(pmech_list[x].mech_mode_id &&
- !fips_override(pmech_list[x].mech_mode_id)))
+ if (((fips & ICA_FIPS_MODE) && !fips_approved(pmech_list[x].mech_mode_id) &&
+ !fips_override(pmech_list[x].mech_mode_id))
|| fips >> 1) {
pmech_list[x].flags = 0;
pmech_list[x].property = 0;

6
libica.changes
View File

@@ -1,3 +1,9 @@
-------------------------------------------------------------------
Fri Feb 7 06:58:32 UTC 2025 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
- Applied a patch (jsc#PED-10289, jsc#PED-3277)
* libica-fips-update-Fix-bug-in-condition-logic.patch
-------------------------------------------------------------------
Tue Dec 31 10:44:31 UTC 2024 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>

5
libica.spec
View File

@@ -1,7 +1,7 @@
#
# spec file for package libica
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -36,7 +36,8 @@ Source4: z90crypt.service
Source5: %{name}-rpmlintrc
###
Patch01: libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
Patch99: libica-sles15sp5-FIPS-hmac-key.patch
Patch02: libica-sles15sp5-FIPS-hmac-key.patch
Patch03: libica-fips-update-Fix-bug-in-condition-logic.patch
###
BuildRequires: autoconf