PJ Fanning created KYLIN-6075:
---------------------------------
Summary: switch to jdk18on bouncycastle jars
Key: KYLIN-6075
URL: https://issues.apache.org/jira/browse/KYLIN-6075
Project: Kylin
Issue Type: Task
Components: Others
Reporter: PJ Fanning
https://github.com/apache/kylin/blob/7fe50b2d5833ad4b8a09d6a27027563dedce8287/pom.xml#L202
Bouncycastle no longer release jdk15on jars. Best to switch to the jdk18on ones.
This is a critical security library and the old jdk15on jars have multiple
security bugs (CVEs).
* https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk15on
* https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on
The switchover is usually very easy. Same classes, just compiled with Java 8.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
