Update Spring Framework to 5.3.18 and 5.2.20.RELEASE

[btkatoufm]

Description

Support CVE-2022-22965.

• Update Spring Framework to 5.3.18
• Update Spring Framework to 5.2.20.RELEASE.

Possible Solution

Set the following for terasoluna-gfw-parent/pom.xml

<dependency>
  <groupId>org.springframework</groupId>
  <artifactId>spring-framework-bom</artifactId>
  <version>${org.springframework.version}</version>
  <type>pom</type>
  <scope>import</scope>
</dependency>
<!-- omitted -->
<org.springframework.version>5.3.18</org.springframework.version>
or
<org.springframework.version>5.2.20.RELEASE</org.springframework.version>

Affect versions

• 5.7.1.RELEASE
• 5.7.0.RELEASE
• 5.6.2.RELEASE
• 5.6.1.RELEASE
• 5.6.0.RELEASE

Issue links

Links to related issues.

• #xx

[btkatoufm]

Support CVE-2022-22965.
The version of TERASOLUNA is as follows

• 5.7.1.RELEASE → 5.7.1.SP1.RELEASE (Spring Framework 5.3.13 → 5.3.18)
  https://github.com/terasolunaorg/terasoluna-gfw/releases/tag/5.7.1.SP1.RELEASE
• 5.7.0.RELEASE → 5.7.0.SP1.RELEASE (Spring Framework 5.3.2 → 5.3.18)
  https://github.com/terasolunaorg/terasoluna-gfw/releases/tag/5.7.0.SP1.RELEASE
• 5.6.2.RELEASE → 5.6.2.SP1.RELEASE (Spring Framework 5.2.12.RELEASE → 5.2.20.RELEASE)
  https://github.com/terasolunaorg/terasoluna-gfw/releases/tag/5.6.2.SP1.RELEASE
• 5.6.1.RELEASE → 5.6.1.SP1.RELEASE (Spring Framework 5.2.3.RELEASE → 5.2.20.RELEASE)
  https://github.com/terasolunaorg/terasoluna-gfw/releases/tag/5.6.1.SP1.RELEASE
• 5.6.0.RELEASE → 5.6.0.SP1.RELEASE (Spring Framework 5.2.3.RELEASE → 5.2.20.RELEASE)
  https://github.com/terasolunaorg/terasoluna-gfw/releases/tag/5.6.0.SP1.RELEASE