CVE-2026-5598 has incorrect fixed versions for bcprov-jdk packages

[sislampanw]

CVE-2026-5598
The affected and fixed versions listed for org.bouncycastle:bcprov-jdk are incorrect.
According to https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598 and the versions available on Maven. The following are the expected affected versions and fixed versions.

Package
org.bouncycastle:bcprov-jdk14
Affected versions

= 1.71, < 1.84
Patched versions
1.84

org.bouncycastle:bcprov-jdk15to18
Affected versions

= 1.71, < 1.84
Patched versions
1.84

org.bouncycastle:bcprov-jdk18on
Affected versions

= 1.71 < 1.80.2, 1.81.0, <= 1.82 < 1.84
Patched versions
1.80.2, 1.81.1, 1.84