CVE-2014-3527 Fixed in Spring Security 3.2.5 and 3.1.7

Releases | Rob Winch | August 15, 2014 | ...

Spring Security 3.2.5 (change log) and 3.1.7 (change log) have been released and are available in Maven Central. Important highlights of this release are:

  • This release contains a fix for CVE-2014-3527 which resolves an issue where a malicious CAS Service can impersonate another CAS Service when using proxy tickets.
  • This release updates the transitive dependencies of the cas module to cas-client-core which has a fix for CVE-2014-4172. This issue was not in Spring Security itself, but the library in which it depends on.

A special thanks to Scott Battaglia & the rest of the CAS team for…

First Release Candidate of Spring Data Release Train Evans Available

Releases | Christoph Strobl | August 13, 2014 | ...

We are happy to announce the first release candidate of the Spring Data release train Evans. We ship the following modules:

Spring MVC Test HtmlUnit 1.0.0.M2 Released

Releases | Rob Winch | August 06, 2014 | ...

I'm pleased to announce the second milestone release of Spring MVC Test HtmlUnit.

The project’s aim is to provide integration between [Spring MVC Test](Spring MVC Test Framework) and HtmlUnit. This simplifies performing end to end testing when using HTML based views.

Changelog

You can view the complete changelog on github. Below are the highlights of the release:

  • The release contains Reference Documentation and Publishes the API Docs
  • The artifact name has changed from spring-test-mvc-htmlunit to spring-test-htmlunit See the Updating Dependencies to see how to add Spring MVC Test HtmlUnit as either a Maven or Gradle dependency
  • The project name has been changed to Spring MVC Test HtmlUnit in order to better align with Spring MVC Test's name
  • Context root of "" is now supported
  • Support for external resources has been added. See the javadoc of DelegatingWebConnection for additional details.
  • Bug fixes

Spring XD 1.0 GA Released

Releases | Mark Pollack | July 30, 2014 | ...

On behalf of the Spring XD team, I am very pleased to announce the general availability of Spring XD 1.0! You can download the zip distribution. You can also install on OSX using homebrew and on RHEL/CentOs using yum.

Spring XD's goal is to be your one stop shop for developing and deploying Big Data Applications. Such applications require a wide range of technologies to address different use-cases while interoperating as a cohesive process. The steps in this process include:

  • Data collection
  • Real-time streaming and analytics
  • Data cleansing
  • Batch processing (both on and off Hadoop)
  • Machine learning and exploratory data analysis
  • Visualization and Reporting
  • Closed loop analytics between real-time and batch processing

Spring Data Dijkstra SR2 released

Releases | Oliver Drotbohm | July 28, 2014 | ...

On behalf of the Spring Data team I am pleased to announce the availability of the second service release of the Dijkstra release train. It includes 49 fixes overall for the following modules:

Spring Batch Admin 1.3.0.RELEASE Is Available

Releases | Michael Minella | July 28, 2014 | ...

We are pleased to announce that Spring Batch Admin 1.3.0.RELEASE is now available via Maven Central, Github and the SpringSource download repository. This release provides updates to Spring Batch Admin to make it compatible with Spring Batch 2.2.x and beyond. In addition to the minor functional updates, this release also provides an overall update to third party dependencies. As noted previously, this will be the last major version with the spring-batch-integration module included as it has been moved to Spring Batch as of Spring Batch 3.0. As always, we look forward to your feedback in…

Spring Framework 4.1 release candidate available

Releases | Juergen Hoeller | July 21, 2014 | ...

Dear Spring community,

It's my pleasure to announce that the first Spring Framework 4.1 release candidate is available now. Our 4.1 delivers a wide range of new features along the following themes:

Annotated JMS listener methods and support for JMS 2.0's shared subscriptions

As well as general alignment of Spring's JMS support with our spring-messaging module. https://spring.io/blog/2014/04/30/spring-4-1-s-upcoming-jms-improvements

Comprehensive support for JCache (JSR-107) annotations and related features

https://spring.io/blog/2014/04/14/cache-abstraction-jcache-jsr-107-annotations-support

Spring XD 1.0.0.RC1 Released

Releases | Mark Pollack | July 18, 2014 | ...

The Spring XD team is pleased to announce that Spring XD Release Candidate 1 is now available for download. You can also install Spring XD on OSX using homebrew and on RHEL/CentOs using yum.

Highlights of this release

  • Direct binding: Deployments can be configured to avoid modules sending data over the Message Bus if they are co-located in the same container. Using this option increases throughput and lowers latency but can not be applied to all deployment topologies.
  • Stream Deployment State: The state of stream is calculated throughout the lifetime of the deployment. For example, if a subset of the modules that comprise a stream have failed, the overall state of the stream changes from Deployed to Incomplete. Once the failures have been addressed, the state of the stream returns to Deployed.
  • Improved REST API

Spring Tool Suite and Groovy/Grails Tool Suite 3.6.0 released

Releases | Martin Lippert | July 11, 2014 | ...

Dear Spring Community,

we are happy to announce the next major release of our Eclipse-based tooling today: The Spring Tool Suite (STS) 3.6.0 and the Groovy/Grails Tool Suite (GGTS) 3.6.0.

Highlights from this release include:

  • based on Eclipse Luna 4.4
  • support for Groovy 2.3
  • updated to Grails 2.4
  • updated to tc Server 2.9.6
  • minor improvements to the Gradle tooling
  • bugfixes, including fixes for endless build loops and memory leaks

To download the distributions, please go visit:

Detailed new and noteworthy notes can be found here: STS/GGTS 3.6.0 New & Noteworthy.

NOTE: Both tool suites ship on top of the latest Eclipse Luna 4.4 release as 64bit and 32bit based zip files only. There will be no native installers for STS/GGTS anymore.

From now on, we shift towards a slightly changed release schedule, shipping minor releases more frequently. Therefore 3.6.1 is scheduled to ship on…

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all