linkis icon indicating copy to clipboard operation
linkis copied to clipboard

[Bug] switch to bcprov-jdk18on jar because the jdk15on one is not maintained and has security issues

Open pjfanning opened this issue 1 year ago • 1 comments

Search before asking

  • [X] I searched the issues and found no similar issues.

Linkis Component

linkis-commons

Steps to reproduce

https://www.bouncycastle.org/download/bouncy-castle-java/#release-notes

CVES like https://github.com/apache/linkis/security/dependabot/111

Expected behavior

use secure jars

Your environment

  • Linkis version used: 1.1.2
  • Environment name and version:
    • cdh-5.14.2
    • hdp-3.1.5
    • hive-2.1.1
    • spark-3.2.1
    • scala-2.12.2
    • jdk 1.8.0_121
    • ....

Anything else

No response

Are you willing to submit a PR?

  • [X] Yes I am willing to submit a PR!

pjfanning avatar Sep 27 '24 00:09 pjfanning