This is an automated email from the ASF dual-hosted git repository.
jinrongtong pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/rocketmq.git
The following commit(s) were added to refs/heads/develop by this push:
new 2c70ce604f Upgraded Bouncy Castle to remediate CVEs (#10102)
2c70ce604f is described below
commit 2c70ce604fc2ac0b4ae700e1ef4f856d8b8be2cf
Author: shub-est <[email protected]>
AuthorDate: Thu Feb 12 03:02:05 2026 +0000
Upgraded Bouncy Castle to remediate CVEs (#10102)
Signed-off-by: Shubham Kalloli <[email protected]>
---
broker/pom.xml | 2 +-
namesrv/pom.xml | 2 +-
pom.xml | 6 +++---
3 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/broker/pom.xml b/broker/pom.xml
index b94e596cc5..62bff4d0bf 100644
--- a/broker/pom.xml
+++ b/broker/pom.xml
@@ -72,7 +72,7 @@
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
- <artifactId>bcpkix-jdk15on</artifactId>
+ <artifactId>bcpkix-jdk18on</artifactId>
</dependency>
<dependency>
<groupId>com.googlecode.concurrentlinkedhashmap</groupId>
diff --git a/namesrv/pom.xml b/namesrv/pom.xml
index 1fc0ebf69f..f594feab01 100644
--- a/namesrv/pom.xml
+++ b/namesrv/pom.xml
@@ -62,7 +62,7 @@
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
- <artifactId>bcpkix-jdk15on</artifactId>
+ <artifactId>bcpkix-jdk18on</artifactId>
</dependency>
</dependencies>
</project>
diff --git a/pom.xml b/pom.xml
index 960a321c5a..320c34331a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -103,7 +103,7 @@
<commons-cli.version>1.5.0</commons-cli.version>
<netty.version>4.1.119.Final</netty.version>
<netty.tcnative.version>2.0.53.Final</netty.tcnative.version>
- <bcpkix-jdk15on.version>1.69</bcpkix-jdk15on.version>
+ <bcpkix-jdk18on.version>1.83</bcpkix-jdk18on.version>
<fastjson.version>1.2.83</fastjson.version>
<fastjson2.version>2.0.43</fastjson2.version>
<javassist.version>3.20.0-GA</javassist.version>
@@ -684,10 +684,10 @@
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
- <artifactId>bcpkix-jdk15on</artifactId>
+ <artifactId>bcpkix-jdk18on</artifactId>
<scope>runtime</scope>
<type>jar</type>
- <version>${bcpkix-jdk15on.version}</version>
+ <version>${bcpkix-jdk18on.version}</version>
</dependency>
<dependency>
<groupId>com.alibaba</groupId>
