[NIFI-13066] Upgrade Bouncy Castle to 1.78.1

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.26.0, 2.0.0-M3
• Component/s: Core Framework, Extensions
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 18/Apr/24 20:23
• Updated: 19/Apr/24 11:48
• Resolved: 19/Apr/24 11:48

Description

Bouncy Castle libraries should be upgraded to version 1.78.1 to incorporate several bug fixes, which include resolving several vulnerabilities that apply to usage patterns outside of NiFi integration points.

Bouncy Castle 1.78.1 corrects a dependency relationship issue with bcpg and bcutil that caused issues with OpenPGP usage in version 1.78.

Issue Links

• links to: GitHub Pull Request #8664