diff --git a/pom.xml b/pom.xml
index c1c063b5..78d4617c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,7 +51,7 @@
     <!-- Dependency Version Properties -->
     <properties>
         <cas.version>3.6.4</cas.version>
-        <bouncycastle.version>1.85</bouncycastle.version>
+        <bouncycastle.version>1.85.2</bouncycastle.version>
         <resource-server.version>1.5.3</resource-server.version>
         <!-- Legacy Servlet 2.5 API; uPortal runtime still serves the Servlet 3.1 spec
              via parent's javax.servlet:javax.servlet-api, but this portlet's source