Spring Security fixes

[stonej]

Hello,

I am using the cas-overlay-template, version 6.6.12.  Is it possible on the build.gradle script to push a certain version of the spring framework ?

There is a security issue with 5.3 and I wanted to update it to 5.3.30 the latest.  At the moment I am editing the war file to put the updates in, is there a simpler way of doing this ?

Thanks

[Pablo Vidaurri]

Look at gradle.properties. It has springBootVersion .... maybe set to 2.7.3 for CAS template v6.6.12.

Per https://github.com/spring-projects/spring-boot/releases/tag/v2.7.16, springboot v2.7.16, it is using Spring 5.3.30. Update the property above