Skip to content

Commit c944ede

Browse files
authored
Updated bcprov to bcprov-jdk18on-1.76
This is to address the LDAP injection vulerability discussed at https://github.com/oracle/nosql-java-sdk/security/dependabot/4
1 parent 6b825ff commit c944ede

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

driver/pom.xml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@
4848
<maven.deploy.skip>false</maven.deploy.skip>
4949
<netty.version>4.1.94.Final</netty.version>
5050
<jackson.version>2.15.2</jackson.version>
51-
<bouncy.version>1.70</bouncy.version>
51+
<bouncy.version>1.76</bouncy.version>
5252
<!-- by default, skip tests; tests require a profile -->
5353
<maven.test.skip>true</maven.test.skip>
5454
<javac>javac</javac>
@@ -190,7 +190,7 @@
190190
<!-- Bouncycastle - request signing in cloud -->
191191
<dependency>
192192
<groupId>org.bouncycastle</groupId>
193-
<artifactId>bcprov-jdk15on</artifactId>
193+
<artifactId>bcprov-jdk18on</artifactId>
194194
<version>${bouncy.version}</version>
195195
<exclusions>
196196
<exclusion>
@@ -202,7 +202,7 @@
202202

203203
<dependency>
204204
<groupId>org.bouncycastle</groupId>
205-
<artifactId>bcpkix-jdk15on</artifactId>
205+
<artifactId>bcpkix-jdk18on</artifactId>
206206
<version>${bouncy.version}</version>
207207
<exclusions>
208208
<exclusion>
@@ -222,11 +222,11 @@
222222

223223
<!-- IAM unit tests only - Bouncycastle has changed
224224
the packaging since 1.69, classes needed by test
225-
has been moved to bcutil-jdk15on.
225+
has been moved to bcutil-jdk18on.
226226
-->
227227
<dependency>
228228
<groupId>org.bouncycastle</groupId>
229-
<artifactId>bcutil-jdk15on</artifactId>
229+
<artifactId>bcutil-jdk18on</artifactId>
230230
<version>${bouncy.version}</version>
231231
<scope>test</scope>
232232
</dependency>

0 commit comments

Comments
 (0)