Accepting request 1244061 from security:tls

OBS-URL: https://build.opensuse.org/request/show/1244061
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libica?expand=0&rev=40

libica-fips-update-Fix-bug-in-condition-logic.patch

@@ -0,0 +1,30 @@
+From ff35d0226e72251ae495913aeb758bd141a3db19 Mon Sep 17 00:00:00 2001
+From: Joerg Schmidbauer <jschmidb@de.ibm.com>
+Date: Wed, 18 Dec 2024 17:09:33 +0100
+Subject: [PATCH] Fix bug in condition logic
+
+This bug causes an incorrect indication of the availability of algos
+in fips mode.
+
+Fixes: https://github.com/opencryptoki/libica/commit/a9288f578b402851d41da579a78e3cbd9d1bab98
+
+Signed-off-by: Joerg Schmidbauer <jschmidb@de.ibm.com>
+---
+ src/s390_crypto.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/s390_crypto.c b/src/s390_crypto.c
+index 58e082a..e05c7e7 100644
+--- a/src/s390_crypto.c
++++ b/src/s390_crypto.c
+@@ -709,8 +709,8 @@ int s390_get_functionlist(libica_func_list_element *pmech_list,
+ 	 *   approved.
+ 	 * - We are in an error state.
+ 	 * */
+-	if (((fips & ICA_FIPS_MODE) && !fips_approved(pmech_list[x].mech_mode_id &&
+-		!fips_override(pmech_list[x].mech_mode_id)))
++	if (((fips & ICA_FIPS_MODE) && !fips_approved(pmech_list[x].mech_mode_id) &&
++		!fips_override(pmech_list[x].mech_mode_id))
+ 	    || fips >> 1) {
+ 		pmech_list[x].flags = 0;
+ 		pmech_list[x].property = 0;

libica.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Feb  7 06:58:32 UTC 2025 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
+
+- Applied a patch (jsc#PED-10289, jsc#PED-3277) 
+  * libica-fips-update-Fix-bug-in-condition-logic.patch
+
 -------------------------------------------------------------------
 Tue Dec 31 10:44:31 UTC 2024 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
 

libica.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libica
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -36,7 +36,8 @@ Source4:        z90crypt.service
 Source5:        %{name}-rpmlintrc
 ###
 Patch01:        libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
-Patch99:        libica-sles15sp5-FIPS-hmac-key.patch
+Patch02:        libica-sles15sp5-FIPS-hmac-key.patch
+Patch03:        libica-fips-update-Fix-bug-in-condition-logic.patch
 ###
 
 BuildRequires:  autoconf