From d737e6eef037cd8230fa1968c59514a85c15975c Mon Sep 17 00:00:00 2001
From: btkatoufm <Fumio.Kato.bp@nttdata.com>
Date: Tue, 5 Apr 2022 10:29:26 +0900
Subject: [PATCH] Update Spring Framework to 5.2.20.RELEASE. #1163

---
 terasoluna-gfw-parent/pom.xml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/terasoluna-gfw-parent/pom.xml b/terasoluna-gfw-parent/pom.xml
index b6e2bdf9c..81967cd95 100644
--- a/terasoluna-gfw-parent/pom.xml
+++ b/terasoluna-gfw-parent/pom.xml
@@ -306,6 +306,16 @@
       </dependency>
       <!-- == End TERASOLUNA == -->
 
+      <!-- == Begin Spring Framework == -->
+      <dependency>
+        <groupId>org.springframework</groupId>
+        <artifactId>spring-framework-bom</artifactId>
+        <version>${org.springframework.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <!-- == End Spring Framework == -->
+
       <!-- == Begin Spring Boot == -->
       <dependency>
         <groupId>org.springframework.boot</groupId>
@@ -528,6 +538,9 @@
     <!-- == Dependency Versions == -->
     <!-- == TERASOLUNA == -->
     <terasoluna.gfw.version>5.6.1.RELEASE</terasoluna.gfw.version>
+    <!-- == Spring Framework == -->
+    <!-- Changed from Spring Boot as a countermeasure against CVE-2022-22965. -->
+    <org.springframework.version>5.2.20.RELEASE</org.springframework.version>
     <!-- == Spring Boot == -->
     <org.springframework.boot.version>2.2.4.RELEASE</org.springframework.boot.version>
     <!-- == Spring Security OAuth == -->