tree d8214394ae530dd294354d64be9a393f9fe4a766
parent 78b0a15c95c7546170b6eb87dc34c0485b5c092e
author Jinwoo Hwang <92374539+JinwooHwang@users.noreply.github.com> 1778587635 -0400
committer GitHub <noreply@github.com> 1778587635 -0400
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJqAxfzCRC1aQ7uu5UhlAAAijYQADlaCyof0UhCfEOGPi5nXw7d
 RvSWufUR7BEyFB3+X6vi2FrxfTl5IwiziETRiSFWC/AYQ2dSx3bwnDj1/Yh3f4Q0
 0W3+qlZn2L1ofLLsMyZAu0x3PbVAvZFm4B1LjZ2BpQlKFZRebaEuAXF18NscqYn3
 arVhFAUAKu5i24xlwj6keBlfIyE72lciG3sf9qf9YPti5GtTzRI+geXJYOpYmzhU
 DqrAlVR1++1mg42lJXnpF+876t8hB0LeXhpQfpEOnUR9XzjRakxwH75f6BKBVc8w
 3pLyVRuM7ARxg5akrbrmzyOnLfbIgXPTJbfUdCdZwmQOJLwkOiWMKD3b7JqqR5xh
 7/wz38w5FqeCL5ntSE43bMkma1DS9GrCgGzBTuWQT2M9gOgtDK8dbjl6ny45X9Es
 9V8BlwJuhtiPe4gA6T12Hn//PfsVLX8aUdQzJjGMVzYxbypRG/vH5vFosxu5Ax0t
 0n3O/L1fZk/oNreJlIopyUAnxj6gNzDuwoMcPHUstQxU7sviNYIvwmq6+8GXeLJv
 hYBElHZEG2PdRBVjMotvWR0QZoozaSupjBBSj48M5oKa/0bqzXeBnrT0+6pBCVvG
 hDLoi0YzGDJ3qZvErjY2i+axkHruQhyly2BY7l2tBiHl2YjWCvkQVxmWJ325Ur8W
 Rq4MDIGr88q7f3WXJDPE
 =dFUt
 -----END PGP SIGNATURE-----
 

GEODE-10583: Upgrade transitive bcprov-jdk18on from 1.82 to 1.84 (#8008)

Pin org.bouncycastle:bcprov-jdk18on (transitive via org.apache.shiro:shiro-crypto-hash:2.1.0) to 1.84 to remediate CVE-2026-0636 (LDAP Injection), CVE-2026-5598 (Covert Timing Channel in FrodoEngine), and CVE-2025-14813 (broken GOSTCTR in G3413CTRBlockCipher), all of which affect 1.82 and are fixed in 1.84.

- Add bouncycastle.version=1.84 and api constraint in DependencyConstraints.groovy
- Update integration-test classpath fixtures to reference bcprov-jdk18on-1.84.jar