This is an automated email from the ASF dual-hosted git repository.

gianm pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git


The following commit(s) were added to refs/heads/master by this push:
     new b04b349bef3 bump bouncy castle due to CVE-2026-5588 (#19473)
b04b349bef3 is described below

commit b04b349bef32eb0ddc0fd799c5d1e5a57eed034a
Author: Lucas Capistrant <[email protected]>
AuthorDate: Mon May 18 16:23:15 2026 -0500

    bump bouncy castle due to CVE-2026-5588 (#19473)
---
 licenses.yaml | 2 +-
 pom.xml       | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/licenses.yaml b/licenses.yaml
index 3b76c7490b4..d8bb74aecce 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -1251,7 +1251,7 @@ name: org.bouncycastle bcprov-jdk18on
 license_category: binary
 module: extensions-core/kubernetes-extensions
 license_name: MIT License
-version: "1.82"
+version: "1.84"
 libraries:
   - org.bouncycastle: bcprov-jdk18on
   - org.bouncycastle: bcprov-ext-jdk18on
diff --git a/pom.xml b/pom.xml
index 0b6e17e77ac..a4ae74100c8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -461,12 +461,12 @@
             <dependency>
                 <groupId>org.bouncycastle</groupId>
                 <artifactId>bcprov-jdk18on</artifactId>
-                <version>1.82</version>
+                <version>1.84</version>
             </dependency>
             <dependency>
                 <groupId>org.bouncycastle</groupId>
                 <artifactId>bcpkix-jdk18on</artifactId>
-                <version>1.82</version>
+                <version>1.84</version>
             </dependency>
             <!-- Transitive dependency of hive-common in druid-kerberos, 
druid-ranger-security and
             druid-iceberg-extension  -->


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to