Update Spring Framework core to Version >= 4.3.17 due to 3rd party vulnerability issues in Spring Framework (CVE-2015-0201, CVE-2015-3192, CVE-2015-5211, CVE-2016-5007, CVE-2018-1257, CVE-2018-1270, CVE-2018-1272, CVE-2018-1275)

Current Situation

• The JobScheduler currently uses the Spring Framework core in version 4.1.2 for JobScheduler integration tests.
• For the vulnerability issues affecting the JobScheduler integration tests, see:
  • https://www.cvedetails.com/cve/CVE-2018-1275/
  • https://www.cvedetails.com/cve/CVE-2018-1272/
  • https://www.cvedetails.com/cve/CVE-2018-1270/
  • https://www.cvedetails.com/cve/CVE-2018-1257/
  • https://www.cvedetails.com/cve/CVE-2016-5007/
  • https://www.cvedetails.com/cve/CVE-2015-5211/
  • https://www.cvedetails.com/cve/CVE-2015-3192/
  • https://www.cvedetails.com/cve/CVE-2015-0201/

Desired Behavior

• Due to vulnerability Issues of older Spring Framework core releases the JobScheduler should use the current version 4.3.10 that fixes the issues.

Maintainer Notes

• The released versions of the JobScheduler are not affected by those vulnerabilities.
• The vulnerability issues affect only the internally used integration tests.