Skip to content

[fix][sec] Upgrade Bouncycastle to 1.78 #22509

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
lhotari merged 1 commit into from
Apr 15, 2024
Merged

[fix][sec] Upgrade Bouncycastle to 1.78 #22509

lhotari merged 1 commit into from
Apr 15, 2024

Conversation

@izumo27
Copy link
Contributor

@izumo27 izumo27 commented Apr 15, 2024

Motivation

Upgrade Bouncy Castle to 1.78 to address CVEs
https://bouncycastle.org/releasenotes.html#r1rv78

Verifying this change

  • Make sure that the change passes the CI checks.

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

Matching PR in forked repository

PR in forked repository: izumo27#4

@github-actions github-actions bot added the doc-not-needed Your PR changes do not impact docs label Apr 15, 2024
lhotari
lhotari approved these changes Apr 15, 2024
View reviewed changes
Copy link
Member

@lhotari lhotari left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@lhotari lhotari added area/security area/dependency Pull requests that update a dependency file labels Apr 15, 2024
@lhotari lhotari added this to the 3.3.0 milestone Apr 15, 2024
@lhotari
Copy link
Member

lhotari commented Apr 15, 2024

Thanks for the contribution @izumo27

@lhotari lhotari merged commit 20915d1 into apache:master Apr 15, 2024
lhotari pushed a commit that referenced this pull request Apr 15, 2024
@izumo27 @lhotari
[fix][sec] Upgrade Bouncycastle to 1.78 (#22509)
fd56217 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
(cherry picked from commit 20915d1)

# Conflicts:
#	pom.xml
lhotari pushed a commit that referenced this pull request Apr 15, 2024
@izumo27 @lhotari
[fix][sec] Upgrade Bouncycastle to 1.78 (#22509)
ef9b28f 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
(cherry picked from commit 20915d1)

# Conflicts:
#	pom.xml
lhotari pushed a commit that referenced this pull request Apr 15, 2024
@izumo27 @lhotari
[fix][sec] Upgrade Bouncycastle to 1.78 (#22509)
3bae751 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
(cherry picked from commit 20915d1)

# Conflicts:
#	pom.xml
mukesh-ctds pushed a commit to datastax/pulsar that referenced this pull request Apr 16, 2024
@izumo27 @mukesh-ctds
[fix][sec] Upgrade Bouncycastle to 1.78 (apache#22509)
6963e6b 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
(cherry picked from commit 20915d1)

# Conflicts:
#	pom.xml
(cherry picked from commit ef9b28f)
This was referenced Apr 16, 2024
Merged
Merged
mukesh-ctds pushed a commit to datastax/pulsar that referenced this pull request Apr 17, 2024
@izumo27 @mukesh-ctds
[fix][sec] Upgrade Bouncycastle to 1.78 (apache#22509)
ea22d3e 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
(cherry picked from commit 20915d1)

# Conflicts:
#	pom.xml
(cherry picked from commit ef9b28f)
mukesh-ctds pushed a commit to datastax/pulsar that referenced this pull request Apr 17, 2024
@izumo27 @mukesh-ctds
[fix][sec] Upgrade Bouncycastle to 1.78 (apache#22509)
31da889 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
(cherry picked from commit 20915d1)

# Conflicts:
#	pom.xml
(cherry picked from commit ef9b28f)
mukesh-ctds pushed a commit to datastax/pulsar that referenced this pull request Apr 19, 2024
@izumo27 @mukesh-ctds
[fix][sec] Upgrade Bouncycastle to 1.78 (apache#22509)
f094c60 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
(cherry picked from commit 20915d1)

# Conflicts:
#	pom.xml
(cherry picked from commit ef9b28f)
srinath-ctds pushed a commit to datastax/pulsar that referenced this pull request Apr 23, 2024
@izumo27 @srinath-ctds
[fix][sec] Upgrade Bouncycastle to 1.78 (apache#22509)
f374057 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
(cherry picked from commit 20915d1)

# Conflicts:
#	pom.xml
(cherry picked from commit ef9b28f)
hanmz pushed a commit to hanmz/pulsar that referenced this pull request Feb 12, 2025
@izumo27 @hanmz
[fix][sec] Upgrade Bouncycastle to 1.78 (apache#22509)
6997d71 
Co-authored-by: hoguni <hoguni@yahoo-corp.jp>
This was referenced May 13, 2025
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lhotari lhotari lhotari approved these changes

@nodece nodece nodece approved these changes

Assignees

@izumo27 izumo27

Labels

area/dependency Pull requests that update a dependency file area/security cherry-picked/branch-3.0 cherry-picked/branch-3.1 cherry-picked/branch-3.2 doc-not-needed Your PR changes do not impact docs release/3.0.5 release/3.1.4 release/3.2.3

Projects

None yet

Milestone

3.3.0

Development

Successfully merging this pull request may close these issues.

3 participants

@izumo27 @lhotari @nodece