ecchronos
ecchronos copied to clipboard
Upgrade ecChronos to use Spring 6 and Java 17
Story Description: As reported from Spring boot team, the CVE-2016-1000027 in Spring-web project will be fixed in Spring 6, which depends of the Java 17, so to fix the vulnerability we need to update both versions, Spring and JDK. The patch for JDK 17 was created few months ago in https://github.com/Ericsson/ecchronos/pull/617
For more informations about, follow the thread below: https://github.com/spring-projects/spring-framework/issues/24434