Merge branch 'release/7.5.1'

CHANGELOG.md

 # Change log
 All notable changes to this project are documented in this file following the [Keep a CHANGELOG](http://keepachangelog.com) conventions.
 
+## 7.5.1
+### Fixed
+- CVE affecting **Spring Boot** 4.3.18: upgraded to: **4.3.20**
+
 
 ## 7.5.0
 ### Changed

atom-model/pom.xml

@@ -3,7 +3,7 @@
 	<parent>
 		<groupId>org.ow2.authzforce</groupId>
 		<artifactId>authzforce-ce-parent</artifactId>
-		<version>7.5.0</version>
+		<version>7.5.1</version>
 	</parent>
 	<artifactId>authzforce-ce-atom-model</artifactId>
 	<packaging>jar</packaging>

pdp-ext-model/pom.xml

@@ -3,7 +3,7 @@
 	<parent>
 		<groupId>org.ow2.authzforce</groupId>
 		<artifactId>authzforce-ce-parent</artifactId>
-		<version>7.5.0</version>
+		<version>7.5.1</version>
 	</parent>
 	<artifactId>authzforce-ce-pdp-ext-model</artifactId>
 	<name>${project.groupId}:${project.artifactId}</name>

pom.xml

@@ -2,7 +2,7 @@
    <modelVersion>4.0.0</modelVersion>
    <groupId>org.ow2.authzforce</groupId>
    <artifactId>authzforce-ce-parent</artifactId>
-   <version>7.5.0</version>
+   <version>7.5.1</version>
    <packaging>pom</packaging>
    <name>${project.groupId}:${project.artifactId}</name>
    <description>AuthzForce - Parent of all AuthzForce components</description>
@@ -23,7 +23,7 @@
       <jaxb2-value-constructor.version>3.0</jaxb2-value-constructor.version>
       <slf4j.version>1.7.25</slf4j.version>
       <!-- This version must match the Spring version's MAJOR.MINOR used by 'logback-ext-spring' and cxf-spring-boot-* in dependencyManagement. (All 4.3.x versions up to 4.3.16 are affected by CVEs.) -->
-      <spring.version>4.3.18.RELEASE</spring.version>
+      <spring.version>4.3.20.RELEASE</spring.version>
       <cxf.version>3.2.5</cxf.version>
    </properties>
    <url>${project.url}</url>
@@ -178,25 +178,25 @@
             <groupId>${project.groupId}</groupId>
             <artifactId>${artifactId.prefix}-xmlns-model</artifactId>
             <!-- Version updated automatically by maven jgitflow:release-start -->
-            <version>7.5.0</version>
+            <version>7.5.1</version>
          </dependency>
          <dependency>
             <groupId>${project.groupId}</groupId>
             <artifactId>${artifactId.prefix}-atom-model</artifactId>
             <!-- Version updated automatically by maven jgitflow:release-start -->
-            <version>7.5.0</version>
+            <version>7.5.1</version>
          </dependency>
          <dependency>
             <groupId>${project.groupId}</groupId>
             <artifactId>${artifactId.prefix}-xacml-model</artifactId>
             <!-- Version updated automatically by maven jgitflow:release-start -->
-            <version>7.5.0</version>
+            <version>7.5.1</version>
          </dependency>
          <dependency>
             <groupId>${project.groupId}</groupId>
             <artifactId>${artifactId.prefix}-pdp-ext-model</artifactId>
             <!-- Version updated automatically by maven jgitflow:release-start -->
-            <version>7.5.0</version>
+            <version>7.5.1</version>
          </dependency>
          <!-- /Common AuthzForce CE dependencies -->
       </dependencies>
@@ -250,7 +250,7 @@
                <!-- Consider combining with Red Hat Victims and OSS Index. More info on Victims vs. Dependency-check: https://bugzilla.redhat.com/show_bug.cgi?id=1388712 -->
                <groupId>org.owasp</groupId>
                <artifactId>dependency-check-maven</artifactId>
-               <version>3.2.1</version>
+               <version>4.0.2</version>
             </plugin>
              <plugin>
                <groupId>org.jvnet.jaxb2.maven2</groupId>

xacml-model/pom.xml

@@ -3,7 +3,7 @@
 	<parent>
 		<groupId>org.ow2.authzforce</groupId>
 		<artifactId>authzforce-ce-parent</artifactId>
-		<version>7.5.0</version>
+		<version>7.5.1</version>
 	</parent>
 	<artifactId>authzforce-ce-xacml-model</artifactId>
 	<name>${project.groupId}:${project.artifactId}</name>

xacml-model/src/main/java/org/ow2/authzforce/xacml/Xacml3JaxbHelper.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/main/java/org/ow2/authzforce/xacml/identifiers/XPathVersion.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/main/java/org/ow2/authzforce/xacml/identifiers/XacmlAttributeCategory.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/main/java/org/ow2/authzforce/xacml/identifiers/XacmlAttributeId.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/main/java/org/ow2/authzforce/xacml/identifiers/XacmlDatatypeId.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/main/java/org/ow2/authzforce/xacml/identifiers/XacmlNodeName.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/main/java/org/ow2/authzforce/xacml/identifiers/XacmlResourceScope.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/main/java/org/ow2/authzforce/xacml/identifiers/XacmlStatusCode.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/main/java/org/ow2/authzforce/xacml/identifiers/XacmlVersion.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xacml-model/src/test/java/org/ow2/authzforce/xacml/test/Test.java

 /**
- * Copyright 2012-2018 THALES.
+ * Copyright 2012-2019 THALES.
  *
  * This file is part of AuthzForce CE.
  *

xmlns-model/pom.xml

@@ -3,7 +3,7 @@
 	<parent>
 		<groupId>org.ow2.authzforce</groupId>
 		<artifactId>authzforce-ce-parent</artifactId>
-		<version>7.5.0</version>
+		<version>7.5.1</version>
 	</parent>
 	<artifactId>authzforce-ce-xmlns-model</artifactId>
 	<name>${project.groupId}:${project.artifactId}</name>