On behalf of the team I am pleased to announce that the Spring Framework 4.2.2, 4.1.8 and 3.2.15 maintenance releases are available now.

Aside from fixing various minor issues across the framework, these releases are designed to prevent Reflected File Download attacks; check the corresponding CVE report for details. We recommend an immediate upgrade for all Spring Framework 3.x and 4.x users.

Spring Framework 4.2.2 also provides WebSocket support for the recently released servers Undertow 1.3 and GlassFish 4.1.1, as well as fine-tuned CORS and JavaScript support. This release serves as the foundation of the upcoming Spring Boot 1.3; stay tuned!

Project Page | GitHub | Issues | Documentation