diff --git a/ambiguous-reseed.patch b/ambiguous-reseed.patch deleted file mode 100644 index 241fd2a..0000000 --- a/ambiguous-reseed.patch +++ /dev/null @@ -1,11 +0,0 @@ ---- bcprov-jdk15on-158/src/org/bouncycastle/jcajce/provider/drbg/DRBG.java 2017-09-15 09:12:43.611044610 +0200 -+++ bcprov-jdk15on-158/src/org/bouncycastle/jcajce/provider/drbg/DRBG.java 2017-09-15 09:13:03.059044684 +0200 -@@ -259,7 +259,7 @@ - if (seedAvailable.getAndSet(false)) - { - samples.set(0); -- drbg.reseed(null); -+ drbg.reseed((byte[])null); - } - } - diff --git a/bcprov-jdk15on-1.58.pom b/bcprov-jdk15on-1.59.pom similarity index 97% rename from bcprov-jdk15on-1.58.pom rename to bcprov-jdk15on-1.59.pom index 2a204fc..880255d 100644 --- a/bcprov-jdk15on-1.58.pom +++ b/bcprov-jdk15on-1.59.pom @@ -5,7 +5,7 @@ bcprov-jdk15on jar Bouncy Castle Provider - 1.58 + 1.59 The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. http://www.bouncycastle.org/java.html diff --git a/bcprov-jdk15on-158.tar.gz b/bcprov-jdk15on-158.tar.gz deleted file mode 100644 index 39168a6..0000000 --- a/bcprov-jdk15on-158.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:76b8ea38902921c6c09b88236c9d348ff22381159fe70922d26f2f4a4d7af3c1 -size 8635229 diff --git a/bcprov-jdk15on-159.tar.gz b/bcprov-jdk15on-159.tar.gz new file mode 100644 index 0000000..ada8dfe --- /dev/null +++ b/bcprov-jdk15on-159.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:1277950662009c57575ad11f696a2824e6c8866f8f1331dd9b7b180b8697c91a +size 9065780 diff --git a/bouncycastle.changes b/bouncycastle.changes index f84392a..b9326f1 100644 --- a/bouncycastle.changes +++ b/bouncycastle.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Mon Jun 11 12:32:43 UTC 2018 - abergmann@suse.com + +- Version update to 1.59: + * CVE-2017-13098: Fix against Bleichenbacher oracle when not + using the lightweight APIs (boo#1072697). + * Release notes: + http://www.bouncycastle.org/releasenotes.html +- Removed patch: + * ambiguous-reseed.patch + ------------------------------------------------------------------- Tue May 15 17:44:49 UTC 2018 - fstrba@suse.com diff --git a/bouncycastle.spec b/bouncycastle.spec index cbf5a58..1afd313 100644 --- a/bouncycastle.spec +++ b/bouncycastle.spec @@ -16,8 +16,8 @@ # -%define ver 1.58 -%define shortver 158 +%define ver 1.59 +%define shortver 159 %define archivever jdk15on-%{shortver} %define classname org.bouncycastle.jce.provider.BouncyCastleProvider Name: bouncycastle @@ -29,7 +29,6 @@ Group: Development/Libraries/Java Url: http://www.bouncycastle.org/ Source0: http://www.bouncycastle.org/download/bcprov-%{archivever}.tar.gz Source1: http://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk15on/%{ver}/bcprov-jdk15on-%{ver}.pom -Patch0: ambiguous-reseed.patch BuildRequires: java-devel >= 1.8 BuildRequires: javapackages-local BuildRequires: javapackages-tools @@ -66,8 +65,6 @@ find . -type f -name "*.jar" -exec rm -f {} \; mkdir src unzip -qq src.zip -d src/ -%patch0 -p1 - %build pushd src export CLASSPATH=$(build-classpath junit)