[CVE-2023-33201] Upgrade bcprov to bcprov-jdk15to18 (#493)

Signed-off-by: Khushboo Rajput <[email protected]> (cherry picked from commit 251fff1)
opensearch-project · Jul 10, 2023 · b964a10 · b964a10
1 parent b742acd
commit b964a10
Show file tree

Hide file tree

Showing 42 changed files with 19 additions and 455 deletions.
diff --git a/build.gradle b/build.gradle
@@ -304,7 +304,7 @@ dependencies {
     }
     implementation 'org.jooq:jooq:3.10.8'
     implementation 'org.apache.commons:commons-lang3:3.9'
-    implementation 'org.bouncycastle:bcprov-jdk15on:1.70'
+    implementation 'org.bouncycastle:bcprov-jdk15to18:1.74'
     implementation 'org.bouncycastle:bcpkix-jdk15on:1.70'
     implementation "org.opensearch:performance-analyzer-commons:${paCommonsVersion}"
     implementation "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}"
@@ -918,4 +918,4 @@ task updateVersion {
         }
         ant.replaceregexp(file:'build.gradle', match: '"opensearch.version", "\\d.*"', replace: '"opensearch.version", "' + newVersion.tokenize('-')[0] + '-SNAPSHOT"', flags:'g', byline:true)
     }
-} 
+}
diff --git a/licenses/bcprov-jdk15on-1.70.jar.sha1 b/licenses/bcprov-jdk15on-1.70.jar.sha1
diff --git a/licenses/bcprov-jdk15to18-1.74.jar.sha1 b/licenses/bcprov-jdk15to18-1.74.jar.sha1
@@ -0,0 +1 @@
+b1a91d0d102042e4ec02084384e1b52b73f125ab
diff --git a/licenses/bcprov-jdk15on-LICENSE.txt → licenses/bcprov-jdk15to18-LICENSE.txt b/licenses/bcprov-jdk15on-LICENSE.txt → licenses/bcprov-jdk15to18-LICENSE.txt
diff --git a/licenses/bcprov-jdk15on-NOTICE.txt → licenses/bcprov-jdk15to18-NOTICE.txt b/licenses/bcprov-jdk15on-NOTICE.txt → licenses/bcprov-jdk15to18-NOTICE.txt
diff --git a/licenses/guava-31.1-jre.jar.sha1 b/licenses/guava-31.1-jre.jar.sha1
diff --git a/licenses/guava-32.1.1-jre.jar.sha1 b/licenses/guava-32.1.1-jre.jar.sha1
@@ -0,0 +1 @@
+ad575652d84153075dd41ec6177ccb15251262b2
diff --git a/licenses/j2objc-annotations-1.3.jar.sha1 b/licenses/j2objc-annotations-1.3.jar.sha1
diff --git a/licenses/j2objc-annotations-LICENSE.txt b/licenses/j2objc-annotations-LICENSE.txt
diff --git a/licenses/j2objc-annotations-NOTICE.txt b/licenses/j2objc-annotations-NOTICE.txt
diff --git a/licenses/jackson-annotations-2.15.1.jar.sha1 b/licenses/jackson-annotations-2.15.1.jar.sha1
diff --git a/licenses/jackson-annotations-2.15.2.jar.sha1 b/licenses/jackson-annotations-2.15.2.jar.sha1
@@ -0,0 +1 @@
+4724a65ac8e8d156a24898d50fd5dbd3642870b8
diff --git a/licenses/jackson-databind-2.15.1.jar.sha1 b/licenses/jackson-databind-2.15.1.jar.sha1
diff --git a/licenses/jackson-databind-2.15.2.jar.sha1 b/licenses/jackson-databind-2.15.2.jar.sha1
@@ -0,0 +1 @@
+9353b021f10c307c00328f52090de2bdb4b6ff9c
diff --git a/licenses/jackson-module-paranamer-2.15.1.jar.sha1 b/licenses/jackson-module-paranamer-2.15.1.jar.sha1
diff --git a/licenses/jackson-module-paranamer-2.15.2.jar.sha1 b/licenses/jackson-module-paranamer-2.15.2.jar.sha1
@@ -0,0 +1 @@
+afa71e1b9e9eee5664481cab589487d0a7f83ff4
diff --git a/licenses/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar.sha1 b/licenses/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar.sha1