You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@zookeeper.apache.org by "shoothzj (via GitHub)" <gi...@apache.org> on 2024/04/16 11:55:16 UTC
[PR] ZOOKEEPER-4827 Bump bouncycastl version from 1.75 to 1.78 [zookeeper]
shoothzj opened a new pull request, #2158:
URL: https://github.com/apache/zookeeper/pull/2158
### Motivation
Upgrade Bouncy Castle to 1.78 to address CVEs
https://bouncycastle.org/releasenotes.html#r1rv78
- https://www.cve.org/CVERecord?id=CVE-2024-29857 (reserved)
- https://security.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6613079
- https://www.cve.org/CVERecord?id=CVE-2024-30171 (reserved)
- https://security.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6613076
- https://www.cve.org/CVERecord?id=CVE-2024-30172 (reserved)
- https://security.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6612984
See also https://github.com/apache/pulsar/pull/22509
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ZOOKEEPER-4827 Bump bouncycastl version from 1.75 to 1.78 [zookeeper]
Posted by "shoothzj (via GitHub)" <gi...@apache.org>.
shoothzj commented on PR #2158:
URL: https://github.com/apache/zookeeper/pull/2158#issuecomment-2083993024
@eolivelli @maoling @tisonkun PTAL :)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ZOOKEEPER-4827 Bump bouncycastl version from 1.75 to 1.78 [zookeeper]
Posted by "tisonkun (via GitHub)" <gi...@apache.org>.
tisonkun merged PR #2158:
URL: https://github.com/apache/zookeeper/pull/2158
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ZOOKEEPER-4827 Bump bouncycastl version from 1.75 to 1.78 [zookeeper]
Posted by "shoothzj (via GitHub)" <gi...@apache.org>.
shoothzj closed pull request #2158: ZOOKEEPER-4827 Bump bouncycastl version from 1.75 to 1.78
URL: https://github.com/apache/zookeeper/pull/2158
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@zookeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org