Merge "upgrade spring.framework to latest 5.2.3 to avoid CVE-2020-5398/7"
authorAmichai Hemli <amichai.hemli@intl.att.com>
Sun, 2 Feb 2020 14:50:58 +0000 (14:50 +0000)
committerGerrit Code Review <gerrit@onap.org>
Sun, 2 Feb 2020 14:50:58 +0000 (14:50 +0000)
1  2 
epsdk-app-onap/pom.xml
vid-app-common/pom.xml

          <encoding>UTF-8</encoding>
          <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
          <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 -        <epsdk.version>2.5.0</epsdk.version>
 +        <epsdk.version>2.6.0</epsdk.version>
 +        <epsdk.overlay.version>2.5.0</epsdk.overlay.version>
          <jackson.version>2.10.1</jackson.version>
          <jackson.databind.version>2.10.1</jackson.databind.version>
-         <springframework.version>5.2.0.RELEASE</springframework.version>
+         <springframework.version>5.2.3.RELEASE</springframework.version>
          <!-- epsdk-core is importing this class, which is only on spring-orm 4 but not in orm 5:
           org.springframework.orm.hibernate4.HibernateTransactionManager
           so following orm.version lets epsdk-core find it -->
Simple merge