Accepting request 616094 from home:abergmann:branches:Java:packages

- Version update to 1.59: 
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch

OBS-URL: https://build.opensuse.org/request/show/616094
OBS-URL: https://build.opensuse.org/package/show/Java:packages/bouncycastle?expand=0&rev=38

ambiguous-reseed.patch

@@ -1,11 +0,0 @@
---- bcprov-jdk15on-158/src/org/bouncycastle/jcajce/provider/drbg/DRBG.java	2017-09-15 09:12:43.611044610 +0200
-+++ bcprov-jdk15on-158/src/org/bouncycastle/jcajce/provider/drbg/DRBG.java	2017-09-15 09:13:03.059044684 +0200
-@@ -259,7 +259,7 @@
-                 if (seedAvailable.getAndSet(false))
-                 {
-                     samples.set(0);
--                    drbg.reseed(null);
-+                    drbg.reseed((byte[])null);
-                 }
-             }
- 

bcprov-jdk15on-1.59.pom

@@ -5,7 +5,7 @@
   <artifactId>bcprov-jdk15on</artifactId>
   <packaging>jar</packaging>
   <name>Bouncy Castle Provider</name>
-  <version>1.58</version>
+  <version>1.59</version>
   <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8.</description>
   <url>http://www.bouncycastle.org/java.html</url>
   <licenses>

bcprov-jdk15on-158.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:76b8ea38902921c6c09b88236c9d348ff22381159fe70922d26f2f4a4d7af3c1
-size 8635229

bcprov-jdk15on-159.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1277950662009c57575ad11f696a2824e6c8866f8f1331dd9b7b180b8697c91a
+size 9065780

bouncycastle.changes

@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Mon Jun 11 12:32:43 UTC 2018 - abergmann@suse.com
+
+- Version update to 1.59: 
+  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
+    using the lightweight APIs (boo#1072697).
+  * Release notes:
+    http://www.bouncycastle.org/releasenotes.html
+- Removed patch:
+  * ambiguous-reseed.patch
+
 -------------------------------------------------------------------
 Tue May 15 17:44:49 UTC 2018 - fstrba@suse.com
 

bouncycastle.spec

@@ -16,8 +16,8 @@
 #
 
 
-%define ver  1.58
-%define shortver 158
+%define ver  1.59
+%define shortver 159
 %define archivever jdk15on-%{shortver}
 %define classname org.bouncycastle.jce.provider.BouncyCastleProvider
 Name:           bouncycastle
@@ -29,7 +29,6 @@ Group:          Development/Libraries/Java
 Url:            http://www.bouncycastle.org/
 Source0:        http://www.bouncycastle.org/download/bcprov-%{archivever}.tar.gz
 Source1:        http://repo1.maven.org/maven2/org/bouncycastle/bcprov-jdk15on/%{ver}/bcprov-jdk15on-%{ver}.pom
-Patch0:         ambiguous-reseed.patch
 BuildRequires:  java-devel >= 1.8
 BuildRequires:  javapackages-local
 BuildRequires:  javapackages-tools
@@ -66,8 +65,6 @@ find . -type f -name "*.jar" -exec rm -f {} \;
 mkdir src
 unzip -qq src.zip -d src/
 
-%patch0 -p1
-
 %build
 pushd src
   export CLASSPATH=$(build-classpath junit)