From 4032f3f351efb6e200e4f1fb82248aab4d10cb80 Mon Sep 17 00:00:00 2001 From: mgb01105731 Date: Tue, 23 Sep 2025 14:44:22 +0800 Subject: [PATCH] update to 1.79 to fix CVE-2025-8916 --- bcjmail-jdk18on-1.78.pom => bcjmail-jdk18on-1.79.pom | 8 ++++---- bcmail-jdk18on-1.78.pom => bcmail-jdk18on-1.79.pom | 8 ++++---- bcpg-jdk18on-1.78.pom => bcpg-jdk18on-1.79.pom | 10 ++++++++-- bcpkix-jdk18on-1.78.pom => bcpkix-jdk18on-1.79.pom | 6 +++--- bcprov-jdk18on-1.78.pom => bcprov-jdk18on-1.79.pom | 2 +- bctls-jdk18on-1.78.pom => bctls-jdk18on-1.79.pom | 6 +++--- bcutil-jdk18on-1.78.pom => bcutil-jdk18on-1.79.pom | 4 ++-- bouncycastle.spec | 7 +++++-- download | 2 +- 9 files changed, 31 insertions(+), 22 deletions(-) rename bcjmail-jdk18on-1.78.pom => bcjmail-jdk18on-1.79.pom (93%) rename bcmail-jdk18on-1.78.pom => bcmail-jdk18on-1.79.pom (93%) rename bcpg-jdk18on-1.78.pom => bcpg-jdk18on-1.79.pom (86%) rename bcpkix-jdk18on-1.78.pom => bcpkix-jdk18on-1.79.pom (94%) rename bcprov-jdk18on-1.78.pom => bcprov-jdk18on-1.79.pom (97%) rename bctls-jdk18on-1.78.pom => bctls-jdk18on-1.79.pom (93%) rename bcutil-jdk18on-1.78.pom => bcutil-jdk18on-1.79.pom (95%) diff --git a/bcjmail-jdk18on-1.78.pom b/bcjmail-jdk18on-1.79.pom similarity index 93% rename from bcjmail-jdk18on-1.78.pom rename to bcjmail-jdk18on-1.79.pom index 5efc8b4..c350fc1 100644 --- a/bcjmail-jdk18on-1.78.pom +++ b/bcjmail-jdk18on-1.79.pom @@ -5,7 +5,7 @@ bcjmail-jdk18on jar Bouncy Castle Jakarta S/MIME API - 1.78 + 1.79 The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. The Jakarta Mail API and the Jakarta activation framework will also be needed. https://www.bouncycastle.org/java.html @@ -33,19 +33,19 @@ org.bouncycastle bcprov-jdk18on - 1.78 + 1.79 jar org.bouncycastle bcutil-jdk18on - 1.78 + 1.79 jar org.bouncycastle bcpkix-jdk18on - 1.78 + 1.79 jar diff --git a/bcmail-jdk18on-1.78.pom b/bcmail-jdk18on-1.79.pom similarity index 93% rename from bcmail-jdk18on-1.78.pom rename to bcmail-jdk18on-1.79.pom index c18ad33..7e23076 100644 --- a/bcmail-jdk18on-1.78.pom +++ b/bcmail-jdk18on-1.79.pom @@ -5,7 +5,7 @@ bcmail-jdk18on jar Bouncy Castle S/MIME API - 1.78 + 1.79 The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. The JavaMail API and the Java activation framework will also be needed. https://www.bouncycastle.org/java.html @@ -33,19 +33,19 @@ org.bouncycastle bcprov-jdk18on - 1.78 + 1.79 jar org.bouncycastle bcutil-jdk18on - 1.78 + 1.79 jar org.bouncycastle bcpkix-jdk18on - 1.78 + 1.79 jar diff --git a/bcpg-jdk18on-1.78.pom b/bcpg-jdk18on-1.79.pom similarity index 86% rename from bcpg-jdk18on-1.78.pom rename to bcpg-jdk18on-1.79.pom index c8e8231..94f7c67 100644 --- a/bcpg-jdk18on-1.78.pom +++ b/bcpg-jdk18on-1.79.pom @@ -5,7 +5,7 @@ bcpg-jdk18on jar Bouncy Castle OpenPGP API - 1.78 + 1.79 The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. https://www.bouncycastle.org/java.html @@ -38,7 +38,13 @@ org.bouncycastle bcprov-jdk18on - 1.78 + 1.79 + jar + + + org.bouncycastle + bcutil-jdk18on + 1.79 jar diff --git a/bcpkix-jdk18on-1.78.pom b/bcpkix-jdk18on-1.79.pom similarity index 94% rename from bcpkix-jdk18on-1.78.pom rename to bcpkix-jdk18on-1.79.pom index 1ebddf3..b46007f 100644 --- a/bcpkix-jdk18on-1.78.pom +++ b/bcpkix-jdk18on-1.79.pom @@ -5,7 +5,7 @@ bcpkix-jdk18on jar Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs - 1.78 + 1.79 The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. https://www.bouncycastle.org/java.html @@ -33,13 +33,13 @@ org.bouncycastle bcprov-jdk18on - 1.78 + 1.79 jar org.bouncycastle bcutil-jdk18on - 1.78 + 1.79 jar diff --git a/bcprov-jdk18on-1.78.pom b/bcprov-jdk18on-1.79.pom similarity index 97% rename from bcprov-jdk18on-1.78.pom rename to bcprov-jdk18on-1.79.pom index 6697303..f35201a 100644 --- a/bcprov-jdk18on-1.78.pom +++ b/bcprov-jdk18on-1.79.pom @@ -5,7 +5,7 @@ bcprov-jdk18on jar Bouncy Castle Provider - 1.78 + 1.79 The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up. https://www.bouncycastle.org/java.html diff --git a/bctls-jdk18on-1.78.pom b/bctls-jdk18on-1.79.pom similarity index 93% rename from bctls-jdk18on-1.78.pom rename to bctls-jdk18on-1.79.pom index 3ff0eae..504b1aa 100644 --- a/bctls-jdk18on-1.78.pom +++ b/bctls-jdk18on-1.79.pom @@ -5,7 +5,7 @@ bctls-jdk18on jar Bouncy Castle JSSE provider and TLS/DTLS API - 1.78 + 1.79 The Bouncy Castle Java APIs for TLS and DTLS, including a provider for the JSSE. https://www.bouncycastle.org/java.html @@ -33,13 +33,13 @@ org.bouncycastle bcprov-jdk18on - 1.78 + 1.79 jar org.bouncycastle bcutil-jdk18on - 1.78 + 1.79 jar diff --git a/bcutil-jdk18on-1.78.pom b/bcutil-jdk18on-1.79.pom similarity index 95% rename from bcutil-jdk18on-1.78.pom rename to bcutil-jdk18on-1.79.pom index 0afe657..49dad6d 100644 --- a/bcutil-jdk18on-1.78.pom +++ b/bcutil-jdk18on-1.79.pom @@ -5,7 +5,7 @@ bcutil-jdk18on jar Bouncy Castle ASN.1 Extension and Utility APIs - 1.78 + 1.79 The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up. https://www.bouncycastle.org/java.html @@ -33,7 +33,7 @@ org.bouncycastle bcprov-jdk18on - 1.78 + 1.79 jar diff --git a/bouncycastle.spec b/bouncycastle.spec index bccfbaf..c487d85 100644 --- a/bouncycastle.spec +++ b/bouncycastle.spec @@ -1,6 +1,6 @@ %define anolis_release 1 -%global gittag r1rv78v1 +%global gittag r1rv79 %global classname org.bouncycastle.jce.provider.BouncyCastleProvider %global profilen 1.8 %global profile %(echo %{profilen} | sed "s/\\.//g" ) @@ -8,7 +8,7 @@ Summary: Bouncy Castle Cryptography APIs for Java Name: bouncycastle -Version: 1.78 +Version: 1.79 Release: %{anolis_release}%{?dist} License: MIT URL: http://www.bouncycastle.org @@ -242,6 +242,9 @@ fi %license LICENSE.html %changelog +* Tue Sep 23 2025 mgb01105731 - 1.79-1 +- Update to 1.79 to fix CVE-2025-8916 + * Tue Aug 26 2025 wenxin - 1.78-1 - update to 1.78.1 to fix CVE-2024-29857,CVE-2024-30172 - Removed redundant patch files now included in the upgraded version diff --git a/download b/download index 48881ec..967ced2 100644 --- a/download +++ b/download @@ -1 +1 @@ -81cf388a3030c8d0e52eca7dda4cd720 r1rv78v1.tar.gz \ No newline at end of file +643e24909ff5859b8136b59cd5bdc01a r1rv79.tar.gz -- Gitee