Cuba-platform 7.2.19 security upgrade?

Support
#1

Hi,
I’m using cuba-platform 7.2.19. It uses Springframework 5.2.20-RELEASE.

Springframework version 5.2.22-RELEASE is out from 2022-05. and patches some vulnerabilities (including a CRITICAL one)

Do you planned to produce a cuba 7.2.20 including this springframework version ?

Regards,
Guillaume

#2

Hi Guillaume,

Yes, we are going to release a patch with updated dependencies in the next few weeks.

Meanwhile, you can update dependencies right in your project by specifying them explicitly. For example:

configure(globalModule) {
    dependencies {
        compile('org.springframework:spring-core:5.2.22.RELEASE')
        // ...

Regards,
Konstantin