Yuchen Lin 2018-06-22 11:13:33 +00:00 committed by Git OBS Bridge
commit 4f09a9a1bd
6 changed files with 26 additions and 23 deletions

View File

@ -1,11 +0,0 @@
--- bcprov-jdk15on-158/src/org/bouncycastle/jcajce/provider/drbg/DRBG.java 2017-09-15 09:12:43.611044610 +0200
+++ bcprov-jdk15on-158/src/org/bouncycastle/jcajce/provider/drbg/DRBG.java 2017-09-15 09:13:03.059044684 +0200
@@ -259,7 +259,7 @@
if (seedAvailable.getAndSet(false))
{
samples.set(0);
- drbg.reseed(null);
+ drbg.reseed((byte[])null);
}
}

View File

@ -5,7 +5,7 @@
<artifactId>bcprov-jdk15on</artifactId>
<packaging>jar</packaging>
<name>Bouncy Castle Provider</name>
<version>1.58</version>
<version>1.59</version>
<description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.</description>
<url>http://www.bouncycastle.org/java.html</url>
<licenses>

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:76b8ea38902921c6c09b88236c9d348ff22381159fe70922d26f2f4a4d7af3c1
size 8635229

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1277950662009c57575ad11f696a2824e6c8866f8f1331dd9b7b180b8697c91a
size 9065780

View File

@ -1,3 +1,20 @@
-------------------------------------------------------------------
Mon Jun 11 12:32:43 UTC 2018 - abergmann@suse.com
- Version update to 1.59:
* CVE-2017-13098: Fix against Bleichenbacher oracle when not
using the lightweight APIs (boo#1072697).
* Release notes:
http://www.bouncycastle.org/releasenotes.html
- Removed patch:
* ambiguous-reseed.patch
-------------------------------------------------------------------
Tue May 15 17:44:49 UTC 2018 - fstrba@suse.com
- Build with source and target 8 to prepare for a possible removal
of 1.6 compatibility
-------------------------------------------------------------------
Fri Sep 15 07:25:45 UTC 2017 - fstrba@suse.com

View File

@ -1,7 +1,7 @@
#
# spec file for package bouncycastle
#
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -16,8 +16,8 @@
#
%define ver 1.58
%define shortver 158
%define ver 1.59
%define shortver 159
%define archivever jdk15on-%{shortver}
%define classname org.bouncycastle.jce.provider.BouncyCastleProvider
Name: bouncycastle
@ -29,8 +29,7 @@ Group: Development/Libraries/Java
Url: http://www.bouncycastle.org/
Source0: http://www.bouncycastle.org/download/bcprov-%{archivever}.tar.gz
Source1: http://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk15on/%{ver}/bcprov-jdk15on-%{ver}.pom
Patch0: ambiguous-reseed.patch
BuildRequires: java-devel >= 1.6
BuildRequires: java-devel >= 1.8
BuildRequires: javapackages-local
BuildRequires: javapackages-tools
BuildRequires: junit
@ -66,12 +65,10 @@ find . -type f -name "*.jar" -exec rm -f {} \;
mkdir src
unzip -qq src.zip -d src/
%patch0 -p1
%build
pushd src
export CLASSPATH=$(build-classpath junit)
%javac -g -source 1.6 -target 1.6 -encoding UTF-8 $(find . -type f -name "*.java")
%javac -g -source 8 -target 8 -encoding UTF-8 $(find . -type f -name "*.java")
jarfile="../bcprov-%{version}.jar"
# Exclude all */test/* files except org.bouncycastle.util.test, cf. upstream
files="$(find . -type f \( -name '*.class' -o -name '*.properties' \) -not -path '*/test/*')"