Colm O hEigeartaigh created JCLOUDS-1526:
--------------------------------------------

             Summary: Update BouncyCastle dependency
                 Key: JCLOUDS-1526
                 URL: https://issues.apache.org/jira/browse/JCLOUDS-1526
             Project: jclouds
          Issue Type: Improvement
            Reporter: Colm O hEigeartaigh
             Fix For: 2.3.0, 2.2.1


The BouncyCastle dependency should be updated. The current version used has 
numerous CVEs:

bcprov-ext-jdk15on-1.51.jar 
(pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.51) : CVE-2015-6644, 
CVE-2016-1000338, CVE-2016-1000339, CVE-2016-1000340, CVE-2016-1000341, 
CVE-2016-1000342, CVE-2016-1000343, CVE-2016-1000344, CVE-2016-1000345, 
CVE-2016-1000346, CVE-2016-1000352, CVE-2017-13098, CVE-2018-1000613



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to