[Backport 1.3.x] Upgrade BouncyCastle from 1.75 to 1.78.1 (CVE-2024-30172, CVE-2024-30171 and CVE-2024-29857)

CHANGELOG.md

@@ -7,6 +7,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 ### Added
 ### Dependencies
 - OpenJDK Update (April 2024 Patch releases), update to Eclipse Temurin 11.0.23+9 ([#13406](https://github.com/opensearch-project/OpenSearch/pull/13406))
+- Upgrade BouncyCastle dependencies from 1.75 to 1.78.1 resolving [CVE-2024-30172], [CVE-2024-30171] and [CVE-2024-29857]
 
 ### Changed
 ### Deprecated

buildSrc/version.properties

@@ -35,7 +35,7 @@ jetty             = 9.4.53.v20231009
 # when updating this version, you need to ensure compatibility with:
 #  - plugins/ingest-attachment (transitive dependency, check the upstream POM)
 #  - distribution/tools/plugin-cli
-bouncycastle=1.75
+bouncycastle=1.78.1
 # test dependencies
 randomizedrunner  = 2.7.1
 junit             = 4.13.2

plugins/ingest-attachment/licenses/bcmail-jdk15to18-1.78.1.jar.sha1

@@ -0,0 +1 @@
+4ec9c0125a605408da16cf8758cc75b502204cbb

plugins/ingest-attachment/licenses/bcpkix-jdk15to18-1.78.1.jar.sha1

@@ -0,0 +1 @@
+5884ee847542641d04abfbfdeca3446d0300670b

plugins/ingest-attachment/licenses/bcprov-jdk15to18-1.78.1.jar.sha1

@@ -0,0 +1 @@
+83bfa8229f7127d933161aefb281e54a9ffcf9f4