shield Recommended update for libica, openssl-ibmca, opencryptoki

SUSE-SLE-Module-Server-Applications-15-SP4-2023-473

This update for libica fixes the following issues: libica was upgraded to version 4.2.0 (jsc#PED-581, bsc#1202365). Note that the major library versions was changed from libica.so.3 to libica.so.4. Features: - Display build info via icainfo -v - New API function ica_get_build_version() - Display fips indication via icainfo -f - New API function ica_get_fips_indicator() - New API function ica_aes_gcm_initialize_fips() - New API function ica_aes_gcm_kma_get_iv() - New API function ica_get_msa_level() Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365). v4.1.1: - Fix aes-xts multi-part operations v4.1.0 - FIPS: make libica FIPS 140-3 compliant - New API function ica_ecdsa_sign_ex() - New icainfo output option -r Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629) v4.0.3 - Reduce the number of open file descriptors - Various bug fixes v4.0.2 - Various bug fixes v4.0.1 - Various bug fixes - Compute HMAC from installed library v4.0.0 - NO_SW_FALLBACKS is now the default for libica.so - Removed deprecated API functions including tests - Introduced 'const' for some API function parameters - icastats: new parm -k to display detailed counters This update also provides rebuilds of openssl-ibmca and openCryptoki against the new libica. openssl-ibmca was updated: - Upgraded to version 2.3.1 (jsc#PED-597) - Adjustments for libica 4.1.0 - First version including the provider - Fix for engine build without OpenSSL 3.0 sources - Fix PKEY segfault with OpenSSL 3.0 - Build against libica 4.0

• Release Date
  Feb 21 2023
• References
  Bugzilla: 1202365
  
• Type
  recommended
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.4 aarch64

• Packages
  openCryptoki
  An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware

  3.17.0-150400.4.8.1 lock rpm lock src

Server Applications Module 15.4 ppc64le

• Packages
  openCryptoki
  An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware

  3.17.0-150400.4.8.1 lock rpm lock src

  openCryptoki-64bit
  An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware

  3.17.0-150400.4.8.1 lock rpm

  openCryptoki-devel
  Development files for openCryptoki, a PKCS#11 implementation for IBM hardware

  3.17.0-150400.4.8.1 lock rpm

Server Applications Module 15.4 s390x

• Packages
  libica
  Library interface for the IBM Cryptographic Accelerator device driver

  4.2.0-150400.3.3.1 lock src

  libica-devel
  Development files for the ICA device driver interface library

  4.2.0-150400.3.3.1 lock rpm

  libica-devel-static
  Static Development files for the ICA device driver interface library

  4.2.0-150400.3.3.1 lock rpm

  libica-tools
  Utilities for the IBM Cryptographic Accelerator

  4.2.0-150400.3.3.1 lock rpm

  libica4
  Library interface for the IBM Cryptographic Accelerator

  4.2.0-150400.3.3.1 lock rpm

  openCryptoki
  An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware

  3.17.0-150400.4.8.1 lock rpm lock src

  openCryptoki-64bit
  An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware

  3.17.0-150400.4.8.1 lock rpm

  openCryptoki-devel
  Development files for openCryptoki, a PKCS#11 implementation for IBM hardware

  3.17.0-150400.4.8.1 lock rpm

  openssl-ibmca
  The IBMCA OpenSSL dynamic engine

  2.3.1-150400.4.3.1 lock rpm lock src

Server Applications Module 15.4 x86_64

• Packages
  openCryptoki
  An Implementation of PKCS#11 (Cryptoki) v2.11 for IBM Cryptographic Hardware

  3.17.0-150400.4.8.1 lock rpm lock src

  openCryptoki-devel
  Development files for openCryptoki, a PKCS#11 implementation for IBM hardware

  3.17.0-150400.4.8.1 lock rpm