From 9733231ff7c15f29a1f9618df613d523e03dab31 Mon Sep 17 00:00:00 2001
From: btkatoufm <Fumio.Kato.bp@nttdata.com>
Date: Tue, 5 Apr 2022 10:24:32 +0900
Subject: [PATCH] Update Spring Framework to 5.3.18. #1163

---
 terasoluna-gfw-parent/pom.xml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/terasoluna-gfw-parent/pom.xml b/terasoluna-gfw-parent/pom.xml
index a8b080d87..515e4356a 100644
--- a/terasoluna-gfw-parent/pom.xml
+++ b/terasoluna-gfw-parent/pom.xml
@@ -314,6 +314,16 @@
       </dependency>
       <!-- == End TERASOLUNA == -->
 
+      <!-- == Begin Spring Framework == -->
+      <dependency>
+        <groupId>org.springframework</groupId>
+        <artifactId>spring-framework-bom</artifactId>
+        <version>${org.springframework.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <!-- == End Spring Framework == -->
+
       <!-- == Begin Spring Boot == -->
       <dependency>
         <groupId>org.springframework.boot</groupId>
@@ -528,6 +538,9 @@
     <!-- == Dependency Versions == -->
     <!-- == TERASOLUNA == -->
     <terasoluna.gfw.version>5.7.0.RELEASE</terasoluna.gfw.version>
+    <!-- == Spring Framework == -->
+    <!-- Changed from Spring Boot as a countermeasure against CVE-2022-22965. -->
+    <org.springframework.version>5.3.18</org.springframework.version>
     <!-- == Spring Boot == -->
     <org.springframework.boot.version>2.4.1</org.springframework.boot.version>
     <!-- == Spring Security OAuth == -->