From 37328465741f5969921317639b22ba46ce3f3391f29f8b63aa33b42d5af27c13 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= Date: Thu, 19 Jul 2018 10:27:49 +0000 Subject: [PATCH] - Version update to 1.60 bsc#1100694: * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code * Release notes: http://www.bouncycastle.org/releasenotes.html OBS-URL: https://build.opensuse.org/package/show/Java:packages/bouncycastle?expand=0&rev=40 --- bcprov-jdk15on-1.59.pom => bcprov-jdk15on-1.60.pom | 2 +- bcprov-jdk15on-159.tar.gz | 3 --- bcprov-jdk15on-160.tar.gz | 3 +++ bouncycastle.changes | 8 ++++++++ bouncycastle.spec | 4 ++-- 5 files changed, 14 insertions(+), 6 deletions(-) rename bcprov-jdk15on-1.59.pom => bcprov-jdk15on-1.60.pom (97%) delete mode 100644 bcprov-jdk15on-159.tar.gz create mode 100644 bcprov-jdk15on-160.tar.gz diff --git a/bcprov-jdk15on-1.59.pom b/bcprov-jdk15on-1.60.pom similarity index 97% rename from bcprov-jdk15on-1.59.pom rename to bcprov-jdk15on-1.60.pom index 880255d..685d22f 100644 --- a/bcprov-jdk15on-1.59.pom +++ b/bcprov-jdk15on-1.60.pom @@ -5,7 +5,7 @@ bcprov-jdk15on jar Bouncy Castle Provider - 1.59 + 1.60 The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. http://www.bouncycastle.org/java.html diff --git a/bcprov-jdk15on-159.tar.gz b/bcprov-jdk15on-159.tar.gz deleted file mode 100644 index ada8dfe..0000000 --- a/bcprov-jdk15on-159.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:1277950662009c57575ad11f696a2824e6c8866f8f1331dd9b7b180b8697c91a -size 9065780 diff --git a/bcprov-jdk15on-160.tar.gz b/bcprov-jdk15on-160.tar.gz new file mode 100644 index 0000000..9545507 --- /dev/null +++ b/bcprov-jdk15on-160.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:92c042beb96bffec0890778ab036ac14d16f35da2ef21eaef8d8d23f340ee686 +size 9207686 diff --git a/bouncycastle.changes b/bouncycastle.changes index b9326f1..31d63b2 100644 --- a/bouncycastle.changes +++ b/bouncycastle.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Thu Jul 19 10:24:12 UTC 2018 - tchvatal@suse.com + +- Version update to 1.60 bsc#1100694: + * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code + * Release notes: + http://www.bouncycastle.org/releasenotes.html + ------------------------------------------------------------------- Mon Jun 11 12:32:43 UTC 2018 - abergmann@suse.com diff --git a/bouncycastle.spec b/bouncycastle.spec index 1afd313..30ec4c1 100644 --- a/bouncycastle.spec +++ b/bouncycastle.spec @@ -16,8 +16,8 @@ # -%define ver 1.59 -%define shortver 159 +%define ver 1.60 +%define shortver 160 %define archivever jdk15on-%{shortver} %define classname org.bouncycastle.jce.provider.BouncyCastleProvider Name: bouncycastle