search

hierynomus / smbj

Server Message Block (SMB2, SMB3) implementation in Java
Other
695 stars 178 forks source link

CVEs in dependency bcprov-jdk18on #832

Open doggy-dev opened 1 month ago

doggy-dev commented 1 month ago

Hi,

bcprov-jdk18on 1.77 has 4 vulnerabilities: CVE-2024-34447 CVE-2024-30172 CVE-2024-30171 CVE-2024-29857

An update to version 1.78.1 is needed.

doggy-dev commented 1 month ago

Thanks @hierynomus for merging the PR. When can I expect a release of the project?

dkocher commented 1 month ago

Thanks @hierynomus for merging the PR. When can I expect a release of the project?

You can always override versions of transient dependencies using dependencyManagement section in your POM without requiring a new release from the library.