File _patchinfo of Package patchinfo.27719

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.27719

<patchinfo incident="27719">
  <issue tracker="jsc" id="PED-581"></issue>
  <issue tracker="jsc" id="PED-621"></issue>
  <issue tracker="jsc" id="PED-597"></issue>
  <issue tracker="jsc" id="PED-629"></issue>
  <issue tracker="bnc" id="1202365">FIPS 140-3 Libica: requirements</issue>
  <packager>msmeissn</packager>
  <rating>moderate</rating>
  <category>recommended</category>
  <summary>Recommended update for libica, openssl-ibmca, openCryptoki</summary>
  <description>This update for libica fixes the following issues:

libica was upgraded to version 4.2.0 (jsc#PED-581, bsc#1202365).

Note that the major library versions was changed from libica.so.3 to libica.so.4.

Features:

- Display build info via icainfo -v
- New API function ica_get_build_version()
- Display fips indication via icainfo -f
- New API function ica_get_fips_indicator()
- New API function ica_aes_gcm_initialize_fips()
- New API function ica_aes_gcm_kma_get_iv()
- New API function ica_get_msa_level()

Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).

v4.1.1:

- Fix aes-xts multi-part operations

v4.1.0

- FIPS: make libica FIPS 140-3 compliant
- New API function ica_ecdsa_sign_ex()
- New icainfo output option -r

Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)

v4.0.3

- Reduce the number of open file descriptors
- Various bug fixes

v4.0.2

- Various bug fixes

v4.0.1

- Various bug fixes
- Compute HMAC from installed library

v4.0.0

- NO_SW_FALLBACKS is now the default for libica.so
- Removed deprecated API functions including tests
- Introduced 'const' for some API function parameters
- icastats: new parm -k to display detailed counters

This update also provides rebuilds of openssl-ibmca and openCryptoki against the new libica.

openssl-ibmca was updated:

- Upgraded to version 2.3.1 (jsc#PED-597)
  - Adjustments for libica 4.1.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  - Fix PKEY segfault with OpenSSL 3.0
  - Build against libica 4.0

</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.27719

Places