-
Notifications
You must be signed in to change notification settings - Fork 1.3k
[Security] switch to jdk18on bouncycastle jars #10954
Copy link
Copy link
Description
Bouncycastle no longer release jdk15on jars. Best to switch to the jdk18on ones.
This is a critical security library and the old jdk15on jars have multiple security bugs (CVEs).
- https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk15on
- https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on
The switchover is usually very easy. Same classes, just compiled with Java 8.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Type
Fields
Give feedbackNo fields configured for Task.
Projects
Status
Dev In Progress
Status
In Progress