From 7a2a7708672a65b595cb72747504b9e7deb399f3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Piotr=20=C5=BBurek?= <Piotr.Zurek@hyland.com>
Date: Wed, 8 May 2024 19:56:35 +0200
Subject: [PATCH] ACS-7776 Upgrade 3rd Party Components (#954)

---
 pom.xml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 066a5288..a4044ab7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,7 +10,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.2.4</version>
+        <version>3.2.5</version>
     </parent>
 
     <properties>
@@ -28,6 +28,8 @@
         <dependency.tika.version>2.9.2</dependency.tika.version>
         <dependency.poi.version>5.2.5</dependency.poi.version>
         <dependency.snakeyaml.version>2.2</dependency.snakeyaml.version>
+        <!--The override can be removed when transitive (from tika) bouncycastle dependency is free of vulnerabilities-->
+        <dependency.bouncycastle.version.override>1.78.1</dependency.bouncycastle.version.override>
 
         <parent.core.deploy.skip>false</parent.core.deploy.skip>
     </properties>
@@ -128,6 +130,16 @@
 
     <dependencyManagement>
         <dependencies>
+            <dependency>
+                <groupId>org.bouncycastle</groupId>
+                <artifactId>bcmail-jdk18on</artifactId>
+                <version>${dependency.bouncycastle.version.override}</version>
+            </dependency>
+            <dependency>
+                <groupId>org.bouncycastle</groupId>
+                <artifactId>bcprov-jdk18on</artifactId>
+                <version>${dependency.bouncycastle.version.override}</version>
+            </dependency>
             <dependency>
                 <groupId>org.dom4j</groupId>
                 <artifactId>dom4j</artifactId>