[
https://issues.apache.org/jira/browse/KARAF-7710?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17745432#comment-17745432
]
ASF GitHub Bot commented on KARAF-7710:
---------------------------------------
jbonofre merged PR #1726:
URL: https://github.com/apache/karaf/pull/1726
> Fix CVE-2023-33201 in BouncyCastle
> ----------------------------------
>
> Key: KARAF-7710
> URL: https://issues.apache.org/jira/browse/KARAF-7710
> Project: Karaf
> Issue Type: Bug
> Affects Versions: 4.4.3
> Reporter: Colm O hEigeartaigh
> Assignee: Jean-Baptiste Onofré
> Priority: Major
>
> Karaf 4.4.3 uses BouncyCastle 1.70 which is vulnerable to CVE-2023-33201.
> I'll submit a PR to update to 1.75, which also involves changing the maven
> groupid from jdk15on to jdk18on.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
