[IGNITE-9349] Update Spring Data 2x and 1x and Spring 5x and 4x versions

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.6
• Fix Version/s: 2.7
• Component/s: spring
• Labels: important vulnerability
• Flags: Important
• Assignee: Dmitry Pavlov
• Reporter: Dmitry Pavlov
• Created: 22/Aug/18 14:35
• Updated: 22/Apr/20 08:36
• Resolved: 13/Sep/18 17:43

Description

CVE-2018-1257 - Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17-, needs to be fixed
CVE-2018-1258 - Spring Framework versions prior to 5.0.6, needs to be fixed
following vulnerabilities are actual for Ignite dependencies at the master because spring version are 4.3.16 & 5.0.5

CVE-2018-1259 - Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7
CVE-2018-1273 - Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5
Spring-data and spring-data-2-0 need versions update.

Issue Links

• is part of: IGNITE-8984 Ignite 2.5 - Vulnerabilities