Mageia 6: MGASA-2018-0376 Moderate: BouncyCastle Signature Issue

Updated bouncycastle packages fix security vulnerabilities:
Ensure full validation of ASN.1 encoding of signature on verification. It was possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may have allowed the introduction of 'invisible' data into a signed structure (CVE-2016-1000338).
Prevent AESEngine key information leak via lookup table accesses (CVE-2016-1000339).
Preventcarry propagation bugs in the implementation of squaring for several raw math classes (CVE-2016-1000340).
DSA signature generation was vulnerable to timing attack. Where timings can be closely observed for the generation of signatures may have allowed an attacker to gain information about the signature's k value and ultimately the private value as well (CVE-2016-1000341).
Ensure that ECDSA does fully validate ASN.1 encoding of signature on verification. It was possible to inject extra elements in the sequence making up the signature and stil...