This is an automated email from the ASF dual-hosted git repository.

dongjoon pushed a commit to branch branch-3.4
in repository https://gitbox.apache.org/repos/asf/spark.git


The following commit(s) were added to refs/heads/branch-3.4 by this push:
     new d9a6e5d45607 [SPARK-44441][BUILD] Upgrade `bcprov-jdk15on` and 
`bcpkix-jdk15on` to 1.70
d9a6e5d45607 is described below

commit d9a6e5d456078868a9794b27ff971f63dd502ef1
Author: yangjie01 <yangji...@baidu.com>
AuthorDate: Sat Jul 15 12:17:07 2023 -0500

    [SPARK-44441][BUILD] Upgrade `bcprov-jdk15on` and `bcpkix-jdk15on` to 1.70
    
    This pr aims to upgrade `bcprov-jdk15on` and `bcpkix-jdk15on`  from 1.60 to 
1.70
    
    The new version fixed 
[CVE-2020-15522](https://github.com/bcgit/bc-java/wiki/CVE-2020-15522).
    
    The release notes as follows:
    - https://www.bouncycastle.org/releasenotes.html#r1rv70
    
    No, just upgrade test dependency
    
    Pass Git Hub Actions
    
    Closes #42015 from LuciferYang/SPARK-44441.
    
    Authored-by: yangjie01 <yangji...@baidu.com>
    Signed-off-by: Sean Owen <sro...@gmail.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 77218d162c41..e347a592cb17 100644
--- a/pom.xml
+++ b/pom.xml
@@ -213,7 +213,7 @@
     <maven-antrun.version>1.8</maven-antrun.version>
     <commons-crypto.version>1.1.0</commons-crypto.version>
     <commons-cli.version>1.5.0</commons-cli.version>
-    <bouncycastle.version>1.60</bouncycastle.version>
+    <bouncycastle.version>1.70</bouncycastle.version>
     <tink.version>1.7.0</tink.version>
     <netty.version>4.1.87.Final</netty.version>
     <!--


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@spark.apache.org
For additional commands, e-mail: commits-h...@spark.apache.org

Reply via email to