This is an automated email from the ASF dual-hosted git repository. dongjoon pushed a commit to branch branch-3.4 in repository https://gitbox.apache.org/repos/asf/spark.git
The following commit(s) were added to refs/heads/branch-3.4 by this push: new d9a6e5d45607 [SPARK-44441][BUILD] Upgrade `bcprov-jdk15on` and `bcpkix-jdk15on` to 1.70 d9a6e5d45607 is described below commit d9a6e5d456078868a9794b27ff971f63dd502ef1 Author: yangjie01 <yangji...@baidu.com> AuthorDate: Sat Jul 15 12:17:07 2023 -0500 [SPARK-44441][BUILD] Upgrade `bcprov-jdk15on` and `bcpkix-jdk15on` to 1.70 This pr aims to upgrade `bcprov-jdk15on` and `bcpkix-jdk15on` from 1.60 to 1.70 The new version fixed [CVE-2020-15522](https://github.com/bcgit/bc-java/wiki/CVE-2020-15522). The release notes as follows: - https://www.bouncycastle.org/releasenotes.html#r1rv70 No, just upgrade test dependency Pass Git Hub Actions Closes #42015 from LuciferYang/SPARK-44441. Authored-by: yangjie01 <yangji...@baidu.com> Signed-off-by: Sean Owen <sro...@gmail.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 77218d162c41..e347a592cb17 100644 --- a/pom.xml +++ b/pom.xml @@ -213,7 +213,7 @@ <maven-antrun.version>1.8</maven-antrun.version> <commons-crypto.version>1.1.0</commons-crypto.version> <commons-cli.version>1.5.0</commons-cli.version> - <bouncycastle.version>1.60</bouncycastle.version> + <bouncycastle.version>1.70</bouncycastle.version> <tink.version>1.7.0</tink.version> <netty.version>4.1.87.Final</netty.version> <!-- --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@spark.apache.org For additional commands, e-mail: commits-h...@spark.apache.org