From fc7e760697f74215b08438fecfcf9b05a1822ea24b7899e1c630e164922a0f3c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Chv=C3=A1tal?= Date: Mon, 11 Jun 2018 17:11:15 +0000 Subject: [PATCH] Accepting request 616094 from home:abergmann:branches:Java:packages - Version update to 1.59: * CVE-2017-13098: Fix against Bleichenbacher oracle when not using the lightweight APIs (boo#1072697). * Release notes: http://www.bouncycastle.org/releasenotes.html - Removed patch: * ambiguous-reseed.patch OBS-URL: https://build.opensuse.org/request/show/616094 OBS-URL: https://build.opensuse.org/package/show/Java:packages/bouncycastle?expand=0&rev=38 --- ambiguous-reseed.patch | 11 ----------- bcprov-jdk15on-1.58.pom => bcprov-jdk15on-1.59.pom | 2 +- bcprov-jdk15on-158.tar.gz | 3 --- bcprov-jdk15on-159.tar.gz | 3 +++ bouncycastle.changes | 11 +++++++++++ bouncycastle.spec | 7 ++----- 6 files changed, 17 insertions(+), 20 deletions(-) delete mode 100644 ambiguous-reseed.patch rename bcprov-jdk15on-1.58.pom => bcprov-jdk15on-1.59.pom (97%) delete mode 100644 bcprov-jdk15on-158.tar.gz create mode 100644 bcprov-jdk15on-159.tar.gz diff --git a/ambiguous-reseed.patch b/ambiguous-reseed.patch deleted file mode 100644 index 241fd2a..0000000 --- a/ambiguous-reseed.patch +++ /dev/null @@ -1,11 +0,0 @@ ---- bcprov-jdk15on-158/src/org/bouncycastle/jcajce/provider/drbg/DRBG.java 2017-09-15 09:12:43.611044610 +0200 -+++ bcprov-jdk15on-158/src/org/bouncycastle/jcajce/provider/drbg/DRBG.java 2017-09-15 09:13:03.059044684 +0200 -@@ -259,7 +259,7 @@ - if (seedAvailable.getAndSet(false)) - { - samples.set(0); -- drbg.reseed(null); -+ drbg.reseed((byte[])null); - } - } - diff --git a/bcprov-jdk15on-1.58.pom b/bcprov-jdk15on-1.59.pom similarity index 97% rename from bcprov-jdk15on-1.58.pom rename to bcprov-jdk15on-1.59.pom index 2a204fc..880255d 100644 --- a/bcprov-jdk15on-1.58.pom +++ b/bcprov-jdk15on-1.59.pom @@ -5,7 +5,7 @@ bcprov-jdk15on jar Bouncy Castle Provider - 1.58 + 1.59 The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. http://www.bouncycastle.org/java.html diff --git a/bcprov-jdk15on-158.tar.gz b/bcprov-jdk15on-158.tar.gz deleted file mode 100644 index 39168a6..0000000 --- a/bcprov-jdk15on-158.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:76b8ea38902921c6c09b88236c9d348ff22381159fe70922d26f2f4a4d7af3c1 -size 8635229 diff --git a/bcprov-jdk15on-159.tar.gz b/bcprov-jdk15on-159.tar.gz new file mode 100644 index 0000000..ada8dfe --- /dev/null +++ b/bcprov-jdk15on-159.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:1277950662009c57575ad11f696a2824e6c8866f8f1331dd9b7b180b8697c91a +size 9065780 diff --git a/bouncycastle.changes b/bouncycastle.changes index f84392a..b9326f1 100644 --- a/bouncycastle.changes +++ b/bouncycastle.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Mon Jun 11 12:32:43 UTC 2018 - abergmann@suse.com + +- Version update to 1.59: + * CVE-2017-13098: Fix against Bleichenbacher oracle when not + using the lightweight APIs (boo#1072697). + * Release notes: + http://www.bouncycastle.org/releasenotes.html +- Removed patch: + * ambiguous-reseed.patch + ------------------------------------------------------------------- Tue May 15 17:44:49 UTC 2018 - fstrba@suse.com diff --git a/bouncycastle.spec b/bouncycastle.spec index cbf5a58..1afd313 100644 --- a/bouncycastle.spec +++ b/bouncycastle.spec @@ -16,8 +16,8 @@ # -%define ver 1.58 -%define shortver 158 +%define ver 1.59 +%define shortver 159 %define archivever jdk15on-%{shortver} %define classname org.bouncycastle.jce.provider.BouncyCastleProvider Name: bouncycastle @@ -29,7 +29,6 @@ Group: Development/Libraries/Java Url: http://www.bouncycastle.org/ Source0: http://www.bouncycastle.org/download/bcprov-%{archivever}.tar.gz Source1: http://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk15on/%{ver}/bcprov-jdk15on-%{ver}.pom -Patch0: ambiguous-reseed.patch BuildRequires: java-devel >= 1.8 BuildRequires: javapackages-local BuildRequires: javapackages-tools @@ -66,8 +65,6 @@ find . -type f -name "*.jar" -exec rm -f {} \; mkdir src unzip -qq src.zip -d src/ -%patch0 -p1 - %build pushd src export CLASSPATH=$(build-classpath junit)