chore(deps): upgrade spring-security to 6.3.4

Mitigates CVE-2024-38821
b2ihealthcare · Nov 22, 2024 · e75baad · e75baad
1 parent c25aabd
commit e75baad
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 9 deletions.
diff --git a/core/com.b2international.snowowl.core.rest/.classpath b/core/com.b2international.snowowl.core.rest/.classpath
@@ -6,11 +6,11 @@
 	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-context-6.1.13.jar"/>
 	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-core-6.1.13.jar"/>
 	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-expression-6.1.13.jar"/>
-	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-security-config-6.3.3.jar"/>
 	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-aop-6.1.13.jar"/>
-	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-security-core-6.3.3.jar"/>
-	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-security-web-6.3.3.jar"/>
-	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-security-crypto-6.3.3.jar"/>
+	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-security-config-6.3.4.jar"/>
+	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-security-core-6.3.4.jar"/>
+	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-security-web-6.3.4.jar"/>
+	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-security-crypto-6.3.4.jar"/>
 	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-jcl-6.1.13.jar"/>
 	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-web-6.1.13.jar"/>
 	<classpathentry exported="true" kind="lib" path="WEB-INF/lib/spring-webmvc-6.1.13.jar"/>

diff --git a/core/com.b2international.snowowl.core.rest/META-INF/MANIFEST.MF b/core/com.b2international.snowowl.core.rest/META-INF/MANIFEST.MF
@@ -18,10 +18,10 @@ Bundle-ClassPath: .,
  WEB-INF/lib/springdoc-openapi-starter-webmvc-api-2.6.0.jar,
  WEB-INF/lib/spring-expression-6.1.13.jar,
  WEB-INF/lib/spring-jcl-6.1.13.jar,
- WEB-INF/lib/spring-security-config-6.3.3.jar,
- WEB-INF/lib/spring-security-core-6.3.3.jar,
- WEB-INF/lib/spring-security-crypto-6.3.3.jar,
- WEB-INF/lib/spring-security-web-6.3.3.jar,
+ WEB-INF/lib/spring-security-config-6.3.4.jar,
+ WEB-INF/lib/spring-security-core-6.3.4.jar,
+ WEB-INF/lib/spring-security-crypto-6.3.4.jar,
+ WEB-INF/lib/spring-security-web-6.3.4.jar,
  WEB-INF/lib/spring-web-6.1.13.jar,
  WEB-INF/lib/spring-webmvc-6.1.13.jar,
  WEB-INF/lib/swagger-core-jakarta-2.2.22.jar

diff --git a/core/com.b2international.snowowl.core.rest/pom.xml b/core/com.b2international.snowowl.core.rest/pom.xml
@@ -13,7 +13,7 @@
 
 	<properties>
 		<spring.version>6.1.13</spring.version>
-		<spring.security.version>6.3.3</spring.security.version>
+		<spring.security.version>6.3.4</spring.security.version>
 		<springdoc.version>2.6.0</springdoc.version>
 		<!-- Make sure this version matches the one present in the target-platform for swagger-annotations and models -->
 		<swagger.core.version>2.2.22</swagger.core.version>