search

hapifhir / hapi-hl7v2

277 stars 138 forks source link

Library and Version uplift(s) (bouncycastle, spring, junit) and (slf4j, log4j) #121

Closed granadacoder closed 3 months ago

granadacoder commented 4 months ago

This what is in https://github.com/hapifhir/hapi-hl7v2/pull/120 plus log4j and slf4j.

Library and Version uplift(s)

Change from bcprov-jdk16 to bcprov-jdk18on bcmail-jdk16 to bcmail-jdk18on

slf4j-log4j12 to slf4j-reload4j log4j to log4j-core

Version changes: bouncycastle.version from '1.46' to '1.78.1' spring.version from '5.2.6.RELEASE' to '5.3.34' junit.version from '4.12' to '4.13.2'

log4j.version from '1.2.17' to '2.23.1'
slf4j.version from '1.7.30' to '1.7.36'

Primary motivation:

Security vulnerabilities with

https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk16/1.46

and

https://mvnrepository.com/artifact/org.springframework/spring-context/5.2.6.RELEASE

and

https://mvnrepository.com/artifact/log4j/log4j/1.2.16