2.x: backport bouncycastle upgrade from 3.x to 2.x

[barchetta]

Could you please upgrade bouncycastle in 2.x to 1.74 or newer?

See https://github.com/bcgit/bc-java/wiki/CVE-2023-33201

[jyotisaini]

Thanks for reporting the issue @barchetta. we will take a look and post an update here.

[barchetta]

@jyotisaini any update on this?