Skip to content

[Snyk] Upgrade jsrsasign from 10.6.1 to 10.9.0#1078

Open
Berkmann18 wants to merge 1 commit into
masterfrom
snyk-upgrade-603090165f510c76c0a82ffc4a00e433
Open

[Snyk] Upgrade jsrsasign from 10.6.1 to 10.9.0#1078
Berkmann18 wants to merge 1 commit into
masterfrom
snyk-upgrade-603090165f510c76c0a82ffc4a00e433

Conversation

@Berkmann18

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to upgrade jsrsasign from 10.6.1 to 10.9.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 9 versions ahead of your current version.

  • The recommended version was released a year ago.

Release notes
Package name: jsrsasign
  • 10.9.0 - 2023-11-27
    • Changes from 10.8.6 to 10.9.0 (2023-Nov-27)
      • KEYUTIL.getPEM is updated not to use weak ciphers (#599)
        • default encryptionScheme is changed from des-EDE3-CBC to aes256-CBC
        • default prf is changed from hmacWithSHA1 to hmacWithSHA256
      • src/keyutil.js
        • more encrypted PKCS#8 private key support
          • KEYUTIL.getKey now supports encrypted PKCS#8 private key with
            aes128-CBC, aes256-CBC encrypted and using hmacWithSHA224/256/384/512 as
            psudorandom function.
          • KEYUTIL.getPEM now supports such as above encrypted PKCS#8 PEM
            priavte key.
      • src/crypto.js
        • Cipher.decrypt/encrypt now supports symmetric ciphers (des-EDE3-CBC,aes128-CBC,aes256-CBC)
      • src/base64x.js
        • function inttohex and twoscompl are added
      • src/asn1.js
        • ASN1Util.bigIntToMinTwosComplementsHex is now DEPRECATED. use twoscompl.
      • src/asn1x509.js
        • aes*-CBC and hmacWithSHA* OIDs are added
      • test/qunit-do-{base64x,crypto-cipher,keyutil-eprv,keyutil,keyutil-p8egen}.html
        • update and add some test cases for above
      • stop bower support (bower.json removed)
  • 10.8.6 - 2023-04-26
    • Changes from 10.8.5 to 10.8.6 (2023-Apr-26)
      • src/x509.js
        • another bugfix X509.getExtSubjectDirectoryAttributes method
  • 10.8.5 - 2023-04-26
    • Changes from 10.8.4 to 10.8.5 (2023-Apr-26)
      • src/x509.js
        • bugfix X509.getExtSubjectDirectoryAttributes method
  • 10.8.4 - 2023-04-26
    • Changes from 10.8.3 to 10.8.4 (2023-Apr-26)
      • src/asn1x509.js
        • SubjectDirectoryAttributes class
          • add array of array support for arbitrary attribute value
      • src/x509.js
        • add X509.getExtSubjectDirectoryAttributes method for
          ExtSubjectDirectoryAttributes extension
        • update X509.getExtParam method
          • support SubjectDirectoryAttributes
          • parse unknown extension as ASN.1
      • src/base64x.js
        • bugfix foldnl function: when length of s is multiple of n,
          result has unnecessary new line in the end of string.
      • qunit-do-{asn1x509,x509-ext,base64x,x500-param}.html
        • update and add some test cases for above
  • 10.8.3 - 2023-04-19
    • Changes from 10.8.2 to 10.8.3 (2023-Apr-20)
      • src/asn1x509.js
        • Add OIDs for CABR S/MIME BR policy OIDs and GN givenName attribute type
  • 10.8.2 - 2023-04-15
    • Changes from 10.8.1 to 10.8.2 (2023-Apr-15)
      • ext/rsa.js
        • fix RSAEncryptOAEP for RSA OAEP encryption #582 #583
          In rare cases, it have been generated ciphertext that
          could not be decrpyted.
  • 10.8.1 - 2023-04-09
    • Changes from 10.8.0 to 10.8.1 (2023-Apr-09)
      • npm/{package.json, lib/footer.js}
  • 10.8.0 - 2023-04-08
    • Changes from 10.7.0 to 10.8.0 (2023-Apr-8)
      • x509.js
        • X509.getUserNotice supports NoticeReference
        • add asn1ToDisplayText method
      • base64x.js
        • add function msectozulu
        • add aryval for nested JSON value access
      • asn1.js
        • DERInteger refactoring
      • test/qunit-do-{asn1,asn1x509,base64x,x509-ext}.html
        • update and add some test cases for above
  • 10.7.0 - 2023-03-12
  • 10.6.1 - 2022-11-20
from jsrsasign GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade jsrsasign from 10.6.1 to 10.9.0.

See this package in npm:
jsrsasign

See this project in Snyk:
https://app.snyk.io/org/berkmann18/project/a87a3a52-bdf7-4b38-901a-e9ad8d66115f?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants