Bouncy Castle to 1.61 for resolve vulns...

jitsi / jitsi-universe-public

Main POM declaring build instructions and common dependencies of all Jitsi projects published on Maven Central.

2 stars 10 forks source link

Bouncy Castle to 1.61 for resolve vulns... #1

Open Neustradamus opened 5 years ago

Neustradamus commented 5 years ago

@emcho, @damencho, @ibauersachs, @saghul: Urgently, can you update Bouncy Castle to 1.61?

https://github.com/jitsi/jitsi-universe-public/blob/master/pom.xml#L37
https://github.com/jitsi/jitsi/blob/master/build.xml#L996
https://github.com/jitsi/webrtc/blob/master/DEPS#L230
http://www.bouncycastle.org/latest_releases.html
http://www.bouncycastle.org/releasenotes.html

Linked to: https://github.com/jitsi/jitsi/issues/562

Neustradamus commented 5 years ago

Linked to https://github.com/jitsi/libjitsi/pull/461.

bbaldino commented 5 years ago

There should be some progress on this soon, as we need to support DTLS 1.2. I've done some work on this in the new bridge (https://github.com/jitsi/jitsi-media-transform/pull/3), but it takes time because we're using deprecated BC APIs as well, so updating is not as simple as changing a version number.

Neustradamus commented 5 years ago

Updated to 1.61.