cloudstack icon indicating copy to clipboard operation
cloudstack copied to clipboard

Published 20 hours ago • verified publisher icon apache

[Security] switch to jdk18on bouncycastle jars

Open pjfanning opened this issue 5 months ago • 1 comments
trafficstars

Bouncycastle no longer release jdk15on jars. Best to switch to the jdk18on ones. This is a critical security library and the old jdk15on jars have multiple security bugs (CVEs).

  • https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk15on
  • https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on

The switchover is usually very easy. Same classes, just compiled with Java 8.

pjfanning avatar Jun 04 '25 14:06 pjfanning

👍

weizhouapache avatar Jun 04 '25 15:06 weizhouapache