CCD-5474 : Fix CVE-2023-33202 : Bumped bouncycastle to address cve (#599

) * Bumped bouncycastle to address cve * reverted springframework version
hmcts · Jun 4, 2024 · cc4fc93 · cc4fc93
1 parent dc5ae13
commit cc4fc93
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -134,6 +134,8 @@ dependencyManagement {
 }
 
 dependencies {
+
+    implementation group: 'org.bouncycastle', name: 'bcprov-jdk18on', version: '1.78'
     compileOnly group: 'org.projectlombok', name: 'lombok', version: lombokVersion
     annotationProcessor  group: 'org.projectlombok', name: 'lombok', version: lombokVersion
     implementation group: 'com.github.hmcts.java-logging', name: 'logging', version: reformLogging

diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
@@ -1,7 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?><suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
   <suppress>
     <notes>Temporary Suppression
-        CVE-2023-33202 refer [Ticket]
         CVE-2024-1597 refer [Ticket]
         CVE-2023-34055 refer [Ticket]
         CVE-2023-44487 refer [Ticket]