Issue #190 - Spring Data Commons vulnerability

Fixed security issue with spring-data-commons by update to version `2.0.9` - see CVE-2018-1273
derjust · Aug 11, 2018 · dd67b35 · dd67b35
1 parent 4cf694b
commit dd67b35
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/README.md b/README.md
@@ -37,7 +37,7 @@ Download the JAR though [Maven Central](http://mvnrepository.com/artifact/com.gi
 <dependency>
   <groupId>com.github.derjust</groupId>
   <artifactId>spring-data-dynamodb</artifactId>
-  <version>5.0.2</version>
+  <version>5.0.3</version>
 </dependency>
 ```
 

diff --git a/pom.xml b/pom.xml
@@ -38,7 +38,7 @@
 
     <properties>
         <spring.version>5.0.4.RELEASE</spring.version>
-        <spring-data.version>2.0.1.RELEASE</spring-data.version>
+        <spring-data.version>2.0.9.RELEASE</spring-data.version>
 
         <hibernate-validator.version>6.0.9.Final</hibernate-validator.version>
         <aws-java-sdk.version>1.11.301</aws-java-sdk.version>

diff --git a/src/changes/changes.xml b/src/changes/changes.xml
@@ -23,7 +23,7 @@
     <author email="zeeman@zeeman.de">derjust</author>
   </properties>
   <body>
-    <release version="5.0.3" date="" description="Maintenance release">
+    <release version="5.0.3" date="2018-08-10" description="Maintenance & security release">
       <action dev="derjust" type="fix" date="2018-03-05">
         Fix Javadoc and cast warnings
       </action>
@@ -67,9 +67,12 @@
       <action dev="SimY4" issue="183" type="fix" date="2018-07-16">
         Match hibernate validator dependency version with Spring Boot 2 dependency. 
       </action>
-      <action dev="derjust" issue="181" type="fix" date="">
+      <action dev="derjust" issue="181" type="fix" date="2018-07-16">
         `Pageable.unpaged()` find queries fail
       </action>
+      <action dev="derjust" issue="190" type="fix" date="2018-08-10">
+        Update to spring-data 2.0.9 due to fix CVE-2018-1273
+      </action>
     </release>
     <release version="5.0.2" date="2018-03-05" description="Maintenance release">
       <action dev="vitolimandibhrata" issue="40" type="add" date="2017-01-07">