[
https://issues.apache.org/jira/browse/CXF-8988?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andriy Redko updated CXF-8988:
------------------------------
Description: The [project page support
tab|https://spring.io/projects/spring-security#support] lists the end of
support date as 2023-11-21 for Spring Security 6.0.x, we may need to update to
Spring Security 6.1.x line to keep CVEs patched
(https://spring.io/security/cve-2024-22257)
> Update to Spring Security 6.1.x release line
> --------------------------------------------
>
> Key: CXF-8988
> URL: https://issues.apache.org/jira/browse/CXF-8988
> Project: CXF
> Issue Type: Improvement
> Affects Versions: 4.0.4
> Reporter: Andriy Redko
> Assignee: Andriy Redko
> Priority: Major
> Fix For: 4.0.5
>
>
> The [project page support
> tab|https://spring.io/projects/spring-security#support] lists the end of
> support date as 2023-11-21 for Spring Security 6.0.x, we may need to update
> to Spring Security 6.1.x line to keep CVEs patched
> (https://spring.io/security/cve-2024-22257)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
