search

sbt / sbt-pgp

PGP plugin for sbt
Other
144 stars 56 forks source link

update bouncy castle #151

Closed remithieblin closed 5 years ago

remithieblin commented 5 years ago

Hi, Could we update the bouncy castle version:

val bouncyCastlePgp = "org.bouncycastle" % "bcpg-jdk15on" % "1.60"

in project/Common.scala https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000345 https://cwe.mitre.org/data/definitions/310.html https://github.com/bcgit/bc-java/commit/21dcb3d9744c83dcf2ff8fcee06dbca7bfa4ef35#diff-4439ce586bf9a13bfec05c0d113b8098

I tried to push the change, but i'm not authorized.. not sure what i need to do, or if you need to whitelist me..

Thank you!

eed3si9n commented 5 years ago

I tried to push the change, but i'm not authorized.. not sure what i need to do, or if you need to whitelist me..

You can fork this repo, and send a pull request.

eed3si9n commented 5 years ago

Fixed in https://github.com/sbt/sbt-pgp/pull/152