[
https://issues.apache.org/jira/browse/KARAF-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17744492#comment-17744492
]
ASF GitHub Bot commented on KARAF-7710:
---------------------------------------
coheigea opened a new pull request, #1726:
URL: https://github.com/apache/karaf/pull/1726
(no comment)
> Fix CVE-2023-33201 in BouncyCastle
> ----------------------------------
>
> Key: KARAF-7710
> URL: https://issues.apache.org/jira/browse/KARAF-7710
> Project: Karaf
> Issue Type: Bug
> Affects Versions: 4.4.3
> Reporter: Colm O hEigeartaigh
> Priority: Major
> Fix For: 4.4.4
>
>
> Karaf 4.4.3 uses BouncyCastle 1.70 which is vulnerable to CVE-2023-33201.
> I'll submit a PR to update to 1.75, which also involves changing the maven
> groupid from jdk15on to jdk18on.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
