[TOMEE-4336] Upgrade bcprov-jdk15to18-1.76.jar and bcpkix-jdk15to18-1.76.jar

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 9.1.3
• Fix Version/s: 9.1.4
• Component/s: TomEE Core Server
• Assignee: Markus Jung
• Reporter: RAJU THANNEERU
• Created: 16/May/24 11:22
• Updated: 08/Oct/24 04:27
• Resolved: 13/Sep/24 15:47

Description

New vulnerabilities in bcprov-jdk15to18-1.76.jar and bcpkix-jdk15to18-1.76.jar

Looks like these are already addressed in 1.78 version, so upgrade to 1.78 or 1.78.1

bcprov-jdk15to18-1.76.jar

CVE-2024-29857

CVE-2024-30171

CVE-2024-30172

CVE-2024-34447

bcpkix-jdk15to18-1.76.jar

CVE-2024-29857

CVE-2024-30171

CVE-2024-30172

Issue Links

• is cloned by: TOMEE-4337 bcprov-jdk15to18-1.76.jar and bcpkix-jdk15to18-1.76.jar