[TOMEE-4232] bcprov-jdk15to18-1.74.jar

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 9.1.0
• Fix Version/s: 10.0.0-M1, 9.1.1
• Component/s: TomEE Core Server
• Assignee: Richard Zowalla
• Reporter: RAJU THANNEERU
• Created: 12/Jul/23 06:22
• Updated: 12/Jul/23 10:49
• Resolved: 12/Jul/23 10:49

Description

We have a new vulnerability on bcprov-jdk15to18-1.73.jar

See https://nvd.nist.gov/vuln/detail/CVE-2023-33201

Looks like this is already addressed in 1.74 version.