Upgrade Bouncy Castle to 1.78 or newer

[barchetta]

Please upgrade Bouncy Castle to 1.78 or newer

https://www.bouncycastle.org/releasenotes.html#r1rv78

[r0bertini]

There is high security issue based on the release notes to versions prior 1.78, so please prioritize this upgrade accordingly, thanks.

For details see CVE-2024-301XX on page https://www.bouncycastle.org/releasenotes.html#r1rv78

[jyotisaini]

Hi @robander - This is already prioritised and is in our roadmap to upgrade the bouncy castle. Please watch this issue for further updates.

[r0bertini]

Thanks @jyotisaini I assume there is no ETA which could be shared here?

[barchetta]

Any status on this?

[jyotisaini]

ETA for the bouncy castle upgrade is 06/04.

[r0bertini]

@jyotisaini was this released yesterday or is there a new timeline please ?

[jyotisaini]

Hi Robert this is scheduled to go out on 06/11.

[r0bertini]

Just confirming this has been released yesterday - v3.43.2 - see pom.xml file in v3.43.1...v3.43.2

[barchetta]

Closing as this is fixed in v3.43.2