[CASSANDRA-9384] Update jBCrypt dependency to version 0.4

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.0.26, 3.11.12, 4.0.2, 4.1
• Severity: Normal
• Since Version: 1.1.2

Source Control Link

https://github.com/apache/cassandra/commit/e0777ff5ab1de2a67f9fb3bf881c28f790312e96

Test and Documentation Plan

unit tests

• Assignee: Stefan Miklosovic
• Reporter: Sam Tunnicliffe

Authors

Stefan Miklosovic

Reviewers

Dinesh Joshi, Stefan Miklosovic

• Created: 14/May/15 14:50
• Updated: 29/Sep/21 17:07
• Resolved: 29/Sep/21 09:03

Description

https://bugzilla.mindrot.org/show_bug.cgi?id=2097

Although the bug tracker lists it as NEW/OPEN, the release notes for 0.4 indicate that this is now fixed, so we should update.

Thanks to Bereng for identifying the issue.

Issue Links

• blocks: CASSANDRA-14612 Please add OWASP Dependency Check to the build (pom.xml)
• is duplicated by: CASSANDRA-16990 Update jbcrypt library to 0.4 from 0.3m to resolve CVE-2015-0886
• links to: GitHub Pull Request #93