Bug #106370 MySql.Data Nuget package (c#) wrong dependecy
Submitted: 3 Feb 2022 14:17 Modified: 27 Apr 2022 14:49
Reporter: Camille Guerin Email Updates:
Status: Closed Impact on me:
None 
Category:Connector / NET Severity:S3 (Non-critical)
Version:8.0.26, 8.0.28 OS:Windows
Assigned to: CPU Architecture:Any

[3 Feb 2022 14:17] Camille Guerin
Description:
Hi,

The MySql.Data .Net connector is using a wrong/deprecated dependency to the project BouncyCastle 1.8.5 (https://www.nuget.org/packages/BouncyCastle/)

This project is not maintained anymore and not up-to-date since more than 9 months...

A new Nuget package is maintained and should be used: Portable.BouncyCastle
https://www.nuget.org/packages/Portable.BouncyCastle/
This project is also up-to-date (1.9.0 as of today), "verified" and as more than 2 times the total number of Downloads.

How to repeat:
Check Nuget dependency of MySql.Data .Net connector

Suggested fix:
Change the nuget dependency from BouncyCastle to Portable.BouncyCastle.
[6 Feb 2022 7:11] MySQL Verification Team
Thank you for the report and feedback.
[6 Feb 2022 7:14] MySQL Verification Team
C/NET 8.0.28 dependency list

Attachment: 106370.png (image/png, text), 41.48 KiB.

[23 Mar 2022 8:36] Camille Guerin
Please use Portable.BouncyCastle, the official NuGet package up-to-date that contains Bouncy Castle Dll version 1.9.0

Portable.BouncyCastle: Version 1.9.0 - 93M download - last update 19.10.2021
BouncyCastle:          Version 1.8.9 - 29M download - last update 05.01.2021
[27 Apr 2022 14:49] Christine Cole
Posted by developer:
 
Fixed as of the upcoming MySQL Connector/NET 8.0.30 release, and here's the proposed changelog entry from the documentation team:

The MySql.Data NuGet package was dependent on an unmaintained version of
BouncyCastle. This fix replaces the dependency with Portable.BouncyCastle,
which contains the BouncyCastle DLL and is current.

Thank you for the bug report.
[30 Jun 2022 5:14] MySQL Verification Team
Bug #107710 marked as a duplicate of this one