IdP patch, likely next week

[Scott Cantor]

Spring just disclosed a number of mostly minimal vulnerabilities (DOS mostly), along with a couple that could in principle affect the IdP in some cases, so we will issue a 5.2.3 release with an updated Spring and anything else we can plausibly address (Netty too if we can get an ldaptive update).

Probably next week, it doesn't appear to warrant more urgent action.

-- Scott