- updated to 4.4.0 (RHEL-50087)

- Resolves: RHEL-50087

libica-4.4.0-fixes.patch

@@ -0,0 +1,33 @@
+From ff35d0226e72251ae495913aeb758bd141a3db19 Mon Sep 17 00:00:00 2001
+From: Joerg Schmidbauer <jschmidb@de.ibm.com>
+Date: Wed, 18 Dec 2024 17:09:33 +0100
+Subject: [PATCH] Fix bug in condition logic
+
+This bug causes an incorrect indication of the availability of algos
+in fips mode.
+
+Fixes: https://github.com/opencryptoki/libica/commit/a9288f578b402851d41da579a78e3cbd9d1bab98
+
+Signed-off-by: Joerg Schmidbauer <jschmidb@de.ibm.com>
+---
+ src/s390_crypto.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/s390_crypto.c b/src/s390_crypto.c
+index 58e082a..e05c7e7 100644
+--- a/src/s390_crypto.c
++++ b/src/s390_crypto.c
+@@ -709,8 +709,8 @@ int s390_get_functionlist(libica_func_list_element *pmech_list,
+ 	 *   approved.
+ 	 * - We are in an error state.
+ 	 * */
+-	if (((fips & ICA_FIPS_MODE) && !fips_approved(pmech_list[x].mech_mode_id &&
+-		!fips_override(pmech_list[x].mech_mode_id)))
++	if (((fips & ICA_FIPS_MODE) && !fips_approved(pmech_list[x].mech_mode_id) &&
++		!fips_override(pmech_list[x].mech_mode_id))
+ 	    || fips >> 1) {
+ 		pmech_list[x].flags = 0;
+ 		pmech_list[x].property = 0;
+-- 
+2.47.1
+

libica.spec

@@ -2,7 +2,7 @@
 
 Summary: Library for accessing ICA hardware crypto on IBM z Systems
 Name: libica
-Version: 4.3.1
+Version: 4.4.0
 Release: 1%{?dist}
 License: CPL
 URL: https://github.com/opencryptoki/
@@ -11,6 +11,8 @@ Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}/%{name}-%{v
 # https://bugzilla.redhat.com/show_bug.cgi?id=1630582
 # https://github.com/opencryptoki/libica/pull/24
 Patch0: %{name}-4.0.0-annotate.patch
+# post GA fixes
+Patch1: %{name}-4.4.0-fixes.patch
 BuildRequires: gcc
 BuildRequires: openssl-devel
 BuildRequires: openssl
@@ -107,6 +109,10 @@ fi
 
 
 %changelog
+* Mon Jan 06 2025 Dan Horák <dhorak@redhat.com> - 4.4.0-1
+- updated to 4.4.0 (RHEL-50087)
+- Resolves: RHEL-50087
+
 * Thu Nov 07 2024 Dan Horák <dhorak@redhat.com> - 4.3.1-1
 - updated to 4.3.1 (RHEL-50087)
 - Resolves: RHEL-50087

sources

@@ -1 +1 @@
-SHA512 (libica-4.3.1.tar.gz) = 3298b188bb29a98a436de0f15b669a56d00edb6418b8b4f370598569702815dac50ebb6ef5bafefe00dbc31067aa5b43bbb27d2e7a2ef82900b1f357b1acfc69
+SHA512 (libica-4.4.0.tar.gz) = b9b4d676cf35b507673cc71fdc7bf5a3a90bbb2a02a368d484821bcbbf507b5ba40b9ae4979927f64b0cd4ddc8464a6375b312f56e2ad58b73dda093cdc18618