Uploaded image for project: 'JOC - JS7 Operations Center'
  1. JOC - JS7 Operations Center
  2. JOC-2288

Upgrade bouncycastle jars to 1.85 and the provider to 1.85.2 due to multiple Vulnerabilities

    XMLWordPrintable

Details

    • Fix
    • Status: Released (View Workflow)
    • Minor
    • Resolution: Fixed
    • 2.9.0, 2.7.8, 2.8.4
    • 2.7.9, 2.8.5, 2.9.1
    • None
    • None
    • CVE-2026-8763,CVE-2026-12802,CVE-2026-12803,CVE-2026-12816,CVE-2026-12817,CVE-2026-12185,CVE-2026-12860,CVE-2026-13506,CVE-2026-13586,CVE-2026-14682,CVE-2026-15055,CVE-2026-58059,CVE-2026-58060,CVE-2026-58062,CVE-2026-58063,CVE-2026-59638,CVE-2026-59639,

    Description

      Current Situation

      JS7 components ship with bouncycastle 3rd parties version 1.84. These version are affected by a multitude of vulnerabilities.

      Desired Behavior

      JS7 components should use these libraries in version 1.85 and the provider library in version 1.85.2 respectively, where these vulnerabilities are fixed.

      Attachments

        Activity

          People

            sp Santiago Aucejo Petzoldt
            sp Santiago Aucejo Petzoldt
            Rajrani Upadhyay Rajrani Upadhyay
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: