Pre-check

  • [x] I am sure that all the content I provide is in English.

Search before asking

  • [x] I had searched in the issues and found no similar feature requirement.

Apache Dubbo Component

Java SDK (apache/dubbo)

Descriptions

Bouncycastle no longer release jdk15on jars. Best to switch to the jdk18on ones. This is a critical security library and the old jdk15on jars have multiple security bugs (CVEs). * https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk15on * https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on

The switchover is usually very easy. Same classes, just compiled with Java 8.

Related issues

No response

Are you willing to submit a pull request to fix on your own?

  • [ ] Yes I am willing to submit a pull request on my own!

Code of Conduct