Uploaded image for project: 'JOC - JS7 Operations Center'
  1. JOC - JS7 Operations Center
  2. JOC-2308

Upgrade bouncycastle to version 1.86 due to multiple 3rd party vulnerabilities

    XMLWordPrintable

Details

    • Fix
    • Status: Released (View Workflow)
    • Minor
    • Resolution: Fixed
    • 2.9.0, 2.7.8, 2.8.4
    • 2.7.9, 2.8.5, 2.9.1
    • None
    • None
    • CVE-2026-17508, CVE-2026-18036, CVE-2026-18040, CVE-2026-71886, CVE-2026-71887, CVE-2026-71888, CVE-2026-71889, CVE-2026-71891, CVE-2026-71892, CVE-2026-85515

    Description

      Current Situation

      Currently JS7 ships with bouncycastle libraries version 1.84. This version is hit be a multitude of vulnerabilities. At the moment no severity is assigned to these issues.

      Desired Behavior

      JS7 should make use of bouncycastle librarires version 1.86 where these issues are fixed.

       

      Attachments

        Activity

          People

            sp Santiago Aucejo Petzoldt
            sp Santiago Aucejo Petzoldt
            Gitesh Patidar Gitesh Patidar
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: