Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[fix][sec] Upgrade Bouncycastle libraries to address CVEs #22826

Merged
merged 2 commits into from
Jun 3, 2024

Conversation

lhotari
Copy link
Member

@lhotari lhotari commented Jun 3, 2024

Motivation

Modifications

Upgrade to org.bouncycastle:bc-fips 1.0.2.5.

  • also update
    • org.bouncycastle:bcpkix-fips to 1.0.7
    • non-fips version to 1.78.1 (from 1.78)
      • remove bcprov-ext-jdk18on since it has been relocated to bcprov-jdk18on

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

@lhotari lhotari added this to the 3.4.0 milestone Jun 3, 2024
@lhotari lhotari requested a review from Technoboy- June 3, 2024 11:47
@lhotari lhotari self-assigned this Jun 3, 2024
@github-actions github-actions bot added the doc-not-needed Your PR changes do not impact docs label Jun 3, 2024
@codecov-commenter
Copy link

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 73.27%. Comparing base (bbc6224) to head (9593629).
Report is 328 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff              @@
##             master   #22826      +/-   ##
============================================
- Coverage     73.57%   73.27%   -0.30%     
- Complexity    32624    32656      +32     
============================================
  Files          1877     1889      +12     
  Lines        139502   141744    +2242     
  Branches      15299    15554     +255     
============================================
+ Hits         102638   103869    +1231     
- Misses        28908    29868     +960     
- Partials       7956     8007      +51     
Flag Coverage Δ
inttests 27.47% <ø> (+2.89%) ⬆️
systests 24.87% <ø> (+0.55%) ⬆️
unittests 72.28% <ø> (-0.56%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 370 files with indirect coverage changes

@lhotari lhotari requested a review from heesung-sn June 3, 2024 16:24
@lhotari lhotari merged commit 05d98f7 into apache:master Jun 3, 2024
50 of 51 checks passed
lhotari added a commit that referenced this pull request Jun 3, 2024
lhotari added a commit that referenced this pull request Jun 3, 2024
lhotari added a commit that referenced this pull request Jun 3, 2024
nikhil-ctds pushed a commit to datastax/pulsar that referenced this pull request Jun 7, 2024
srinath-ctds pushed a commit to datastax/pulsar that referenced this pull request Jun 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants