Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package libica for openSUSE:Factory checked
in at 2025-05-30 14:40:32
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libica (Old)
and /work/SRC/openSUSE:Factory/.libica.new.25440 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libica"
Fri May 30 14:40:32 2025 rev:41 rq:1281372 version:4.4.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/libica/libica.changes 2025-02-07
23:10:59.584327040 +0100
+++ /work/SRC/openSUSE:Factory/.libica.new.25440/libica.changes 2025-05-30
17:22:22.347885273 +0200
@@ -1,0 +2,8 @@
+Fri May 30 09:40:05 UTC 2025 - Nikolay Gueorguiev <nikolay.gueorgu...@suse.com>
+
+- Upgrade libica to version 4.4.1
+ * Bug fixes
+- Removed obsolete patch
+ * libica-fips-update-Fix-bug-in-condition-logic.patch
+
+-------------------------------------------------------------------
@@ -865,2 +872,0 @@
-
--------------------------------------------------------------------
Old:
----
libica-4.4.0.tar.gz
libica-fips-update-Fix-bug-in-condition-logic.patch
New:
----
libica-4.4.1.tar.gz
BETA DEBUG BEGIN:
Old:- Removed obsolete patch
* libica-fips-update-Fix-bug-in-condition-logic.patch
BETA DEBUG END:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ libica.spec ++++++
--- /var/tmp/diff_new_pack.Rk5oNF/_old 2025-05-30 17:22:22.923909461 +0200
+++ /var/tmp/diff_new_pack.Rk5oNF/_new 2025-05-30 17:22:22.927909629 +0200
@@ -22,7 +22,7 @@
%endif
Name: libica
-Version: 4.4.0
+Version: 4.4.1
Release: 0
Summary: Library interface for the IBM Cryptographic Accelerator device
driver
License: CPL-1.0
@@ -37,7 +37,6 @@
###
Patch01: libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
Patch02: libica-sles15sp5-FIPS-hmac-key.patch
-Patch03: libica-fips-update-Fix-bug-in-condition-logic.patch
###
BuildRequires: autoconf
++++++ libica-4.4.0.tar.gz -> libica-4.4.1.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/ChangeLog new/libica-4.4.1/ChangeLog
--- old/libica-4.4.0/ChangeLog 2024-12-17 11:27:26.000000000 +0100
+++ new/libica-4.4.1/ChangeLog 2025-05-14 13:37:56.000000000 +0200
@@ -1,3 +1,5 @@
+v4.4.1
+ [PATCH] bug fixes
v4.4.0
[FEATURE] Updates for FIPS 140-3 certification 2024
[PATCH] Various bug fixes and housekeeping
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/configure.ac
new/libica-4.4.1/configure.ac
--- old/libica-4.4.0/configure.ac 2024-12-17 11:27:26.000000000 +0100
+++ new/libica-4.4.1/configure.ac 2025-05-14 13:37:56.000000000 +0200
@@ -1,4 +1,4 @@
-AC_INIT([libica], [4.4.0], [https://github.com/opencryptoki/libica/issues],,
[https://github.com/opencryptoki/libica])
+AC_INIT([libica], [4.4.1], [https://github.com/opencryptoki/libica/issues],,
[https://github.com/opencryptoki/libica])
# save cmdline flags
cmdline_CFLAGS="$CFLAGS"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/include/ica_api.h
new/libica-4.4.1/include/ica_api.h
--- old/libica-4.4.0/include/ica_api.h 2024-12-17 11:27:26.000000000 +0100
+++ new/libica-4.4.1/include/ica_api.h 2025-05-14 13:37:56.000000000 +0200
@@ -3370,7 +3370,7 @@
* NULL if no memory could be allocated.
*/
ICA_EXPORT
-kma_ctx* ica_aes_gcm_kma_ctx_new();
+kma_ctx* ica_aes_gcm_kma_ctx_new(void);
/**
* Initialize the GCM context. This description applies to both,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/libica.spec new/libica-4.4.1/libica.spec
--- old/libica-4.4.0/libica.spec 2024-12-17 11:27:26.000000000 +0100
+++ new/libica-4.4.1/libica.spec 2025-05-14 13:37:56.000000000 +0200
@@ -1,5 +1,5 @@
Name: libica
-Version: 4.4.0
+Version: 4.4.1
Release: 1%{?dist}
Summary: Interface library to the ICA device driver
@@ -62,6 +62,8 @@
%{_includedir}/ica_api.h
%changelog
+* Tue Apr 29 2025 Joerg Schmidbauer <jschm...@linux.ibm.com>
+- Version v4.4.1
* Tue Dec 10 2024 Joerg Schmidbauer <jschm...@linux.ibm.com>
- Version v4.4.0
* Mon Oct 28 2024 Joerg Schmidbauer <jschm...@linux.vnet.ibm.com>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/src/Makefile.am
new/libica-4.4.1/src/Makefile.am
--- old/libica-4.4.0/src/Makefile.am 2024-12-17 11:27:26.000000000 +0100
+++ new/libica-4.4.1/src/Makefile.am 2025-05-14 13:37:56.000000000 +0200
@@ -1,4 +1,4 @@
-VERSION = 4:4:0
+VERSION = 4:4:1
AM_CFLAGS = @FLAGS@
MAJOR := `echo $(VERSION) | cut -d: -f1`
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/src/s390_crypto.c
new/libica-4.4.1/src/s390_crypto.c
--- old/libica-4.4.0/src/s390_crypto.c 2024-12-17 11:27:26.000000000 +0100
+++ new/libica-4.4.1/src/s390_crypto.c 2025-05-14 13:37:56.000000000 +0200
@@ -403,7 +403,11 @@
char buf[250];
struct dirent *direntp;
char type[6];
- int rc;
+ int rc, in_se_guest = 0;
+
+ rc = file_fgets("/sys/firmware/uv/prot_virt_guest", buf, sizeof(buf));
+ if (rc == 0 && strcmp(buf, "1") == 0)
+ in_se_guest = 1;
if ((sysDir = opendir(dev)) == NULL)
return 0;
@@ -440,10 +444,10 @@
if (type[4] == 'A')
ret |= CARD_AVAILABLE | CEXnA_AVAILABLE;
- if (type[4] == 'C')
+ if (type[4] == 'C' && !in_se_guest)
ret |= CARD_AVAILABLE | CEXnC_AVAILABLE;
- if (type[3] >= '4' && type[4] == 'C')
+ if (type[3] >= '4' && type[4] == 'C' && !in_se_guest)
ret |= CARD_AVAILABLE | CEX4C_AVAILABLE;
}
@@ -709,8 +713,8 @@
* approved.
* - We are in an error state.
* */
- if (((fips & ICA_FIPS_MODE) &&
!fips_approved(pmech_list[x].mech_mode_id &&
- !fips_override(pmech_list[x].mech_mode_id)))
+ if (((fips & ICA_FIPS_MODE) &&
!fips_approved(pmech_list[x].mech_mode_id) &&
+ !fips_override(pmech_list[x].mech_mode_id))
|| fips >> 1) {
pmech_list[x].flags = 0;
pmech_list[x].property = 0;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/test/ec_keygen1_test.sh
new/libica-4.4.1/test/ec_keygen1_test.sh
--- old/libica-4.4.0/test/ec_keygen1_test.sh 2024-12-17 11:27:26.000000000
+0100
+++ new/libica-4.4.1/test/ec_keygen1_test.sh 2025-05-14 13:37:56.000000000
+0200
@@ -1,6 +1,6 @@
#!/bin/bash
-if lszcrypt | grep -q -e "CEX.C.*online"; then
+if lszcrypt | grep -q -e
"^[0-9a-f][0-9a-f]\.[0-9a-f][0-9a-f][0-9a-f][0-9a-f].*CEX.C.*online"; then
ICAPATH=1 ./ec_keygen_test
else
# Show output in log file for debugging
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/test/ec_keygen2_test.sh
new/libica-4.4.1/test/ec_keygen2_test.sh
--- old/libica-4.4.0/test/ec_keygen2_test.sh 2024-12-17 11:27:26.000000000
+0100
+++ new/libica-4.4.1/test/ec_keygen2_test.sh 2025-05-14 13:37:56.000000000
+0200
@@ -1,6 +1,6 @@
#!/bin/bash
-if lszcrypt | grep -q -e "CEX.C.*online"; then
+if lszcrypt | grep -q -e
"^[0-9a-f][0-9a-f]\.[0-9a-f][0-9a-f][0-9a-f][0-9a-f].*CEX.C.*online"; then
ICAPATH=2 ./ec_keygen_test
else
# Show output in log file for debugging
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/test/ecdh1_test.sh
new/libica-4.4.1/test/ecdh1_test.sh
--- old/libica-4.4.0/test/ecdh1_test.sh 2024-12-17 11:27:26.000000000 +0100
+++ new/libica-4.4.1/test/ecdh1_test.sh 2025-05-14 13:37:56.000000000 +0200
@@ -1,6 +1,6 @@
#!/bin/bash
-if lszcrypt | grep -q -e "CEX.C.*online"; then
+if lszcrypt | grep -q -e
"^[0-9a-f][0-9a-f]\.[0-9a-f][0-9a-f][0-9a-f][0-9a-f].*CEX.C.*online"; then
ICAPATH=1 ./ecdh_test
else
# Show output in log file for debugging
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/test/ecdh2_test.sh
new/libica-4.4.1/test/ecdh2_test.sh
--- old/libica-4.4.0/test/ecdh2_test.sh 2024-12-17 11:27:26.000000000 +0100
+++ new/libica-4.4.1/test/ecdh2_test.sh 2025-05-14 13:37:56.000000000 +0200
@@ -1,6 +1,6 @@
#!/bin/bash
-if lszcrypt | grep -q -e "CEX.C.*online"; then
+if lszcrypt | grep -q -e
"^[0-9a-f][0-9a-f]\.[0-9a-f][0-9a-f][0-9a-f][0-9a-f].*CEX.C.*online"; then
ICAPATH=2 ./ecdh_test
else
# Show output in log file for debugging
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/test/ecdsa1_test.sh
new/libica-4.4.1/test/ecdsa1_test.sh
--- old/libica-4.4.0/test/ecdsa1_test.sh 2024-12-17 11:27:26.000000000
+0100
+++ new/libica-4.4.1/test/ecdsa1_test.sh 2025-05-14 13:37:56.000000000
+0200
@@ -1,6 +1,6 @@
#!/bin/bash
-if lszcrypt | grep -q -e "CEX.C.*online"; then
+if lszcrypt | grep -q -e
"^[0-9a-f][0-9a-f]\.[0-9a-f][0-9a-f][0-9a-f][0-9a-f].*CEX.C.*online"; then
ICAPATH=1 ./ecdsa_test
else
# Show output in log file for debugging
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/libica-4.4.0/test/ecdsa2_test.sh
new/libica-4.4.1/test/ecdsa2_test.sh
--- old/libica-4.4.0/test/ecdsa2_test.sh 2024-12-17 11:27:26.000000000
+0100
+++ new/libica-4.4.1/test/ecdsa2_test.sh 2025-05-14 13:37:56.000000000
+0200
@@ -1,6 +1,6 @@
#!/bin/bash
-if lszcrypt | grep -q -e "CEX.C.*online"; then
+if lszcrypt | grep -q -e
"^[0-9a-f][0-9a-f]\.[0-9a-f][0-9a-f][0-9a-f][0-9a-f].*CEX.C.*online"; then
ICAPATH=2 ./ecdsa_test
else
# Show output in log file for debugging
