[SM-4315] Upgrade spring-batch from 3.0.8 to 3.0.10 to address CVE-2019-3774

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: bundles-2020.06
• Component/s: bundles
• Assignee: Freeman Yue Fang
• Reporter: Luigi De Masi
• Created: 06/Feb/20 15:28
• Updated: 29/Jun/20 06:06
• Resolved: 29/Jun/20 06:06

Description

A new security issue  has been discovered on spring-batch versions 3.0.9, 4.0.1, 4.1.0 and older, described in this  security report.

According Pivotal Vulnerability Report, to address this issue it needs to upgrade to 3.0.10 version.