You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@karaf.apache.org by jb...@apache.org on 2020/05/18 07:53:29 UTC

[karaf] branch karaf-4.2.x updated: KARAF-6721 - Update Spring versions due to CVE-2020-5398

This is an automated email from the ASF dual-hosted git repository.

jbonofre pushed a commit to branch karaf-4.2.x
in repository https://gitbox.apache.org/repos/asf/karaf.git


The following commit(s) were added to refs/heads/karaf-4.2.x by this push:
     new e922ff3  KARAF-6721 - Update Spring versions due to CVE-2020-5398
e922ff3 is described below

commit e922ff35e437f27d96e79ef546ea329ad9ae8ae6
Author: Colm O hEigeartaigh <co...@apache.org>
AuthorDate: Thu May 14 08:54:40 2020 +0100

    KARAF-6721 - Update Spring versions due to CVE-2020-5398
    
    (cherry picked from commit df82131b3c04d3cc28d4aae1cef0907a2bd642c4)
---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 13db7a5..af44e7b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -301,8 +301,8 @@
         <spring42.version>4.2.9.RELEASE_1</spring42.version>
         <spring43.version>4.3.25.RELEASE_1</spring43.version>
         <spring50.version>5.0.15.RELEASE_1</spring50.version>
-        <spring51.version>5.1.9.RELEASE_1</spring51.version>
-        <spring52.version>5.2.2.RELEASE_1</spring52.version>
+        <spring51.version>5.1.14.RELEASE_1</spring51.version>
+        <spring52.version>5.2.5.RELEASE_1</spring52.version>
         <spring.security31.version>3.1.4.RELEASE</spring.security31.version>
         <spring.security42.version>4.2.4.RELEASE_1</spring.security42.version>
         <spring.security51.version>5.1.5.RELEASE_1</spring.security51.version>