[TOMEE-4337] bcprov-jdk15to18-1.76.jar and bcpkix-jdk15to18-1.76.jar

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.0.0-M1
• Fix Version/s: 10.0.0-M2
• Component/s: TomEE Core Server
• Assignee: Richard Zowalla
• Reporter: RAJU THANNEERU
• Created: 16/May/24 12:23
• Updated: 16/May/24 12:29
• Resolved: 16/May/24 12:29

Description

New vulnerabilities in bcprov-jdk15to18-1.76.jar and bcpkix-jdk15to18-1.76.jar

Looks like these are already addressed in 1.78 version, so upgrade to 1.78 or 1.78.1

bcprov-jdk15to18-1.76.jar

CVE-2024-29857

CVE-2024-30171

CVE-2024-30172

CVE-2024-34447

bcpkix-jdk15to18-1.76.jar

CVE-2024-29857

CVE-2024-30171

CVE-2024-30172

Issue Links

• is a clone of: TOMEE-4336 Upgrade bcprov-jdk15to18-1.76.jar and bcpkix-jdk15to18-1.76.jar