Migrate to org.bouncycastle.bcpkix-jdk18on by Muthu-Palaniyappan-OL · Pull Request #8 · simple-java-mail/java-utils-mail-dkim

Skip to content

Navigation Menu

Sign in

Appearance settings

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up

Appearance settings

Conversation

@Muthu-Palaniyappan-OL

Copy link

Contributor

@Muthu-Palaniyappan-OL Muthu-Palaniyappan-OL commented

Apr 13, 2025

edited

Loading

Problem Description

This project used net.i2p.crypto:eddsa, which is vulnerable to CVE-2020-36843.

Solution/Fix

Move from net.i2p.crypto:eddsa to org.bouncycastle.bcpkix-jdk18on

…to remediate CVE-2020-36843

Before this commit we were using net.i2p.crypto.eddsa which was vulnerable to CVE-2020-36843, now we are moving to org.bouncycastle.bcpkix-jdk18on to remediate cve

@Muthu-Palaniyappan-OL Muthu-Palaniyappan-OL changed the title Remove net.i2p.crypto.eddsa Migrate to org.bouncycastle.bcpkix-jdk18on

Apr 13, 2025

@bbottema bbottema merged commit 484bfe0 into simple-java-mail:master

Apr 13, 2025

1 check passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@Muthu-Palaniyappan-OL @bbottema