You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tika.apache.org by "Nicolò Mendola (Jira)" <ji...@apache.org> on 2023/07/13 07:03:00 UTC
[jira] [Updated] (TIKA-4099) Upgrade Bouncy Castle to 1.74
[ https://issues.apache.org/jira/browse/TIKA-4099?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Nicolò Mendola updated TIKA-4099:
---------------------------------
Description:
Could you please Upgrade Bounc Castle Dependency to Version 1.74?
{code:java}
┌───────────────────────────────────────────┬────────────────┬──────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Installed Version │ Fixed Version │ Title │
├───────────────────────────────────────────┼────────────────┼──────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ org.bouncycastle:bcprov-jdk18on │ CVE-2023-33201 │ MEDIUM │ 1.73 │ 1.74 │ potential blind LDAP injection attack using a self-signed │
│ │ │ │ │ │ certificate │
│ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2023-33201 │
└───────────────────────────────────────────┴────────────────┴──────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘{code}
was:
Could you please Upgrade Bounc Castle Dependency to Version 1.74?
{code:java}
┌───────────────────────────────────────────┬────────────────┬──────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Installed Version │ Fixed Version │ Title │
├───────────────────────────────────────────┼────────────────┼──────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ org.bouncycastle:bcprov-jdk18on │ CVE-2023-33201 │ MEDIUM │ 1.73 │ 1.74 │ potential blind LDAP injection attack using a self-signed │
│ │ │ │ │ │ certificate │
│ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2023-33201 │
└───────────────────────────────────────────┴────────────────┴──────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘ {code}
> Upgrade Bouncy Castle to 1.74
> -----------------------------
>
> Key: TIKA-4099
> URL: https://issues.apache.org/jira/browse/TIKA-4099
> Project: Tika
> Issue Type: Task
> Affects Versions: 2.8.0
> Reporter: Nicolò Mendola
> Priority: Major
>
> Could you please Upgrade Bounc Castle Dependency to Version 1.74?
>
> {code:java}
> ┌───────────────────────────────────────────┬────────────────┬──────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
> │ Library │ Vulnerability │ Severity │ Installed Version │ Fixed Version │ Title │
> ├───────────────────────────────────────────┼────────────────┼──────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
> │ org.bouncycastle:bcprov-jdk18on │ CVE-2023-33201 │ MEDIUM │ 1.73 │ 1.74 │ potential blind LDAP injection attack using a self-signed │
> │ │ │ │ │ │ certificate │
> │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2023-33201 │
> └───────────────────────────────────────────┴────────────────┴──────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘{code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)