Message12372

Greg McDermott reports via Jython-dev (https://sourceforge.net/p/jython/mailman/message/36601045/):

-----------------------------------------------------------------------------
I see in your 2.7.1 release an old version of bouncycastle.

$  unzip -l jython-installer-2.7.1.jar  | grep bcp
    20354  2017-06-30 19:03   Lib/distutils/bcppcompiler$py.class
    14941  2017-06-30 19:03   Lib/distutils/bcppcompiler.py
   775948  2017-05-29 17:34   extlibs/bcpkix-jdk15on-1.57.jar
  3759724  2017-05-29 17:34   extlibs/bcprov-jdk15on-1.57.jar
   775948  2017-06-30 19:03   javalib/bcpkix-jdk15on-1.57.jar
  3759724  2017-06-30 19:03   javalib/bcprov-jdk15on-1.57.jar

are there plans to update to the latest, which is 1.6.1 currently. 
Can users simply update the jars directly for testing purposes,
or are other changes needed.

thanks
Greg
-----------------------------------------------------------------------------

We should update the JARs. Updating distutils (if that is implied) is perhaps riskier as that infrastructure may have been customised for Jython. (pip breaks if you allow it to update itself.)