oracle / oci-java-sdk

Oracle Cloud Infrastructure SDK for Java
https://cloud.oracle.com/cloud-infrastructure
Other
192 stars 153 forks source link

2.x: backport bouncycastle upgrade from 3.x to 2.x #538

Open barchetta opened 11 months ago

barchetta commented 11 months ago

Could you please upgrade bouncycastle in 2.x to 1.74 or newer?

See https://github.com/bcgit/bc-java/wiki/CVE-2023-33201

jyotisaini commented 11 months ago

Thanks for reporting the issue @barchetta. we will take a look and post an update here.

barchetta commented 8 months ago

@jyotisaini any update on this?