Details
-
Fix
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
1.13.9
-
None
-
CVE-2020-28052
Description
Current Situation
- Currently JobScheduler components use org.bouncycastle:bcprov-jdk15on and org.bouncycastle:bcprov-ext-jdk15on version 1.66
- a vulnerability affects this version,
Desired Behavior
- Due to a vulnerability Issue of older org.bouncycastle:bcprov-jdk15on and org.bouncycastle:bcprov-ext-jdk15on releases the JobScheduler components should use the current version 1.68 that fixes the issues.
Attachments
Issue Links
- relates to
-
YADE-579 SMB - java.lang.IllegalAccessError
- Released