Skip to content

Commit 3bf32d6

Browse files
EmmaHumbersamuel-hawker
authored andcommitted
fix: Update bouncy castle prereq (#1)
The MQ pom.xml file pulls in a specific version of bouncy castle This is backlevel and contains a security vulnerability We can override the bouncy castle level pulled in by stating it as a dependency in our pom.xml MQ have already verified that this new version of bouncy castle works with MQ Fixed by IT26088 (MQ APAR) Contributes to: mhub/qp-planning#1299 Signed-off-by: Emma Humber <emma.humber@ibm.com>
1 parent 99d456b commit 3bf32d6

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

pom.xml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -78,6 +78,18 @@
7878
<version>1.7.25</version>
7979
<scope>test</scope>
8080
</dependency>
81+
82+
<dependency>
83+
<groupId>org.bouncycastle</groupId>
84+
<artifactId>bcprov-jdk15on</artifactId>
85+
<version>1.60</version>
86+
</dependency>
87+
<dependency>
88+
<groupId>org.bouncycastle</groupId>
89+
<artifactId>bcpkix-jdk15on</artifactId>
90+
<version>1.60</version>
91+
</dependency>
92+
8193
</dependencies>
8294

8395
<build>

0 commit comments

Comments
 (0)