hadoop/hadoop-cloud-storage-project
PJ Fanning 2ee0bf9534
HADOOP-19154. Upgrade bouncycastle to 1.78.1 due to CVEs (#6755)
Addresses

* CVE-2024-29857 - Importing an EC certificate with specially crafted F2m parameters can cause high CPU usage during parameter evaluation.
* CVE-2024-30171 - Possible timing based leakage in RSA based handshakes due to exception processing eliminated.
* CVE-2024-30172 - Crafted signature and public key can be used to trigger an infinite loop in the Ed25519 verification code.
* CVE-2024-301XX - When endpoint identification is enabled and an SSL socket is not created with an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address. 

Contributed by PJ Fanning
2024-06-05 15:31:23 +01:00
..
hadoop-cloud-storage Preparing for 3.5.0 development (#6411) 2024-01-19 15:05:22 +08:00
hadoop-cos HADOOP-19154. Upgrade bouncycastle to 1.78.1 due to CVEs (#6755) 2024-06-05 15:31:23 +01:00
hadoop-huaweicloud Preparing for 3.5.0 development (#6411) 2024-01-19 15:05:22 +08:00
pom.xml Preparing for 3.5.0 development (#6411) 2024-01-19 15:05:22 +08:00