Update Spring Framework to 5.2.20.RELEASE. #1163

terasolunaorg · Apr 5, 2022 · d737e6e · d737e6e
1 parent 218cfd3
commit d737e6e
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/terasoluna-gfw-parent/pom.xml b/terasoluna-gfw-parent/pom.xml
@@ -306,6 +306,16 @@
       </dependency>
       <!-- == End TERASOLUNA == -->
 
+      <!-- == Begin Spring Framework == -->
+      <dependency>
+        <groupId>org.springframework</groupId>
+        <artifactId>spring-framework-bom</artifactId>
+        <version>${org.springframework.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <!-- == End Spring Framework == -->
+
       <!-- == Begin Spring Boot == -->
       <dependency>
         <groupId>org.springframework.boot</groupId>
@@ -528,6 +538,9 @@
     <!-- == Dependency Versions == -->
     <!-- == TERASOLUNA == -->
     <terasoluna.gfw.version>5.6.1.RELEASE</terasoluna.gfw.version>
+    <!-- == Spring Framework == -->
+    <!-- Changed from Spring Boot as a countermeasure against CVE-2022-22965. -->
+    <org.springframework.version>5.2.20.RELEASE</org.springframework.version>
     <!-- == Spring Boot == -->
     <org.springframework.boot.version>2.2.4.RELEASE</org.springframework.boot.version>
     <!-- == Spring Security OAuth == -->