Update Spring Framework to 5.3.18. #1163

terasolunaorg · Apr 4, 2022 · 4bf93a4 · 4bf93a4
1 parent aa51437
commit 4bf93a4
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/terasoluna-gfw-parent/pom.xml b/terasoluna-gfw-parent/pom.xml
@@ -323,6 +323,16 @@
       </dependency>
       <!-- == End TERASOLUNA == -->
 
+      <!-- == Begin Spring Framework == -->
+      <dependency>
+        <groupId>org.springframework</groupId>
+        <artifactId>spring-framework-bom</artifactId>
+        <version>${org.springframework.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <!-- == End Spring Framework == -->
+
       <!-- == Begin Spring Boot == -->
       <dependency>
         <groupId>org.springframework.boot</groupId>
@@ -538,6 +548,9 @@
     <!-- == Dependency Versions == -->
     <!-- == TERASOLUNA == -->
     <terasoluna.gfw.version>5.7.1.RELEASE</terasoluna.gfw.version>
+    <!-- == Spring Framework == -->
+    <!-- Changed from Spring Boot as a countermeasure against CVE-2022-22965. -->
+    <org.springframework.version>5.3.18</org.springframework.version>
     <!-- == Spring Boot == -->
     <org.springframework.boot.version>2.6.1</org.springframework.boot.version>
     <!-- == MyBatis3 == -->