Please update Bouncy Castle
Neustradamus opened this issue · 5 comments
Neustradamus commented
Please update Bouncy Castle
- https://www.bouncycastle.org/
- https://www.bouncycastle.org/releasenotes.html
- http://www.bouncycastle.org/latest_releases.html
- https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=bouncy%20castle
- https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=bouncycastle
- https://www.cvedetails.com/vulnerability-list/vendor_id-7637/Bouncycastle.html
Neustradamus commented
@crossle: Removed?
There is always:
Neustradamus commented
And in the organization:
crossle commented
Thanks for your remind, we will remove all Bouncy castle dependence, replace with https://github.com/google/conscrypt
Tougee commented
#2615
MixinNetwork/bot-api-kotlin-client@4ccd448
Upgrade to the latest version now, migrating to conscrypt
can be considered later.