From a1b0b795737ad45b241a7d29a2f6f607656aa76b Mon Sep 17 00:00:00 2001 From: Eugene Grosbein Date: Sun, 15 Jul 2018 15:00:50 +0000 Subject: [PATCH] bouncycastle15: update to version 1.60 This release deals with two CVEs: one affecting RSA key pair generation where the certainty value is being tweaked in the light-weight API, and the other on properly validating an XMSS/XMSS^MT private key on reload. In terms of improvements, the BCJSSE now supports SNI, CMS now supports SHA-3 signatures, the Unified Model is now fully supported for Diffie-Hellman with ephemeral keys, and PGP EC operations can support a wider range of curves. Issues have also been fixed in EST, CRMF request generation, and low-level support has been added for EdDSA. Further details on other additions and bug fixes can be found in the release notes at: https://www.bouncycastle.org/releasenotes.html Security: CVE-2018-1000180 Security: CVE-2018-1000613 MFH: 2018Q3 --- java/bouncycastle15/Makefile | 2 +- java/bouncycastle15/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/java/bouncycastle15/Makefile b/java/bouncycastle15/Makefile index 6dfec1cb88ee..dc6d0a41fde0 100644 --- a/java/bouncycastle15/Makefile +++ b/java/bouncycastle15/Makefile @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= bouncycastle -PORTVERSION= 1.59 +PORTVERSION= 1.60 CATEGORIES= java security MASTER_SITES= http://www.bouncycastle.org/download/ \ http://polydistortion.net/bc/download/ diff --git a/java/bouncycastle15/distinfo b/java/bouncycastle15/distinfo index b1296c5b1b70..7bcccb052002 100644 --- a/java/bouncycastle15/distinfo +++ b/java/bouncycastle15/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1514536470 -SHA256 (crypto-159.tar.gz) = 03c08bc60acdcc035275adccd185bc3683e8b1266aa3400bfb8a526e622aa2d6 -SIZE (crypto-159.tar.gz) = 126095735 +TIMESTAMP = 1531664561 +SHA256 (crypto-160.tar.gz) = 52cdc6faf6fdf665592edceb780ec0f55a3fa4f0b74fe7b8ef3a363ba80847d1 +SIZE (crypto-160.tar.gz) = 140380969