This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
The following commit(s) were added to refs/heads/3.6.x-fixes by this push:
new a2656e1e2be Update BouncyCastle to 1.86 and exclude older version
coming from WSS4J/Opensaml
a2656e1e2be is described below
commit a2656e1e2beac67f62da5ca0b9eccea7950c52e1
Author: Colm O hEigeartaigh <[email protected]>
AuthorDate: Wed Sep 23 14:19:44 2026 +0100
Update BouncyCastle to 1.86 and exclude older version coming from
WSS4J/Opensaml
---
parent/pom.xml | 2 +-
rt/rs/security/xml/pom.xml | 6 ++++++
rt/security-saml/pom.xml | 6 ++++++
rt/ws/security/pom.xml | 4 ++++
4 files changed, 17 insertions(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index bf1649bfa72..76b8a7ec28f 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -85,7 +85,7 @@
<cxf.assertj.version>3.27.7</cxf.assertj.version>
<cxf.atmosphere.version.range>[2.4, 3.0)</cxf.atmosphere.version.range>
<cxf.atmosphere.version>2.6.1</cxf.atmosphere.version>
- <cxf.bcprov.version>1.85</cxf.bcprov.version>
+ <cxf.bcprov.version>1.86</cxf.bcprov.version>
<cxf.brave.reporter.version>2.17.2</cxf.brave.reporter.version>
<cxf.brave.version>5.17.1</cxf.brave.version>
<cxf.brave.zipkin.version>2.27.0</cxf.brave.zipkin.version>
diff --git a/rt/rs/security/xml/pom.xml b/rt/rs/security/xml/pom.xml
index 07ec063bacb..b8ac83b77ca 100644
--- a/rt/rs/security/xml/pom.xml
+++ b/rt/rs/security/xml/pom.xml
@@ -60,6 +60,12 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
+ <exclusions>
+ <exclusion>
+ <groupId>org.bouncycastle</groupId>
+ <artifactId>bcpkix-jdk18on</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
</dependencies>
</project>
diff --git a/rt/security-saml/pom.xml b/rt/security-saml/pom.xml
index d677e629156..091389b2537 100644
--- a/rt/security-saml/pom.xml
+++ b/rt/security-saml/pom.xml
@@ -45,6 +45,12 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
+ <exclusions>
+ <exclusion>
+ <groupId>org.bouncycastle</groupId>
+ <artifactId>bcpkix-jdk18on</artifactId>
+ </exclusion>
+ </exclusions>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
diff --git a/rt/ws/security/pom.xml b/rt/ws/security/pom.xml
index 0e5fa67572f..4f5f90d2c8e 100644
--- a/rt/ws/security/pom.xml
+++ b/rt/ws/security/pom.xml
@@ -111,6 +111,10 @@
<groupId>org.codehaus.woodstox</groupId>
<artifactId>woodstox-core-asl</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>org.bouncycastle</groupId>
+ <artifactId>bcpkix-jdk18on</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
