On behalf of the team, I’m please to announce the release of Spring Session 2021.2. This release upgrades to Spring Data 2021.2 and provides dependency upgrades, minor enhancements, bug fixes, and strategic changes to prepare Spring Session and it’s users for the next generation of Spring Session built on Spring Framework 6.
Hi, Spring fans! Welcome to another installment of This Week in Spring! I am in beautiful Barcelona, Spain, this week, ahead of the upcoming Spring I/O show. I just spent a wonderful week in amazing England, meeting old friends, speaking at Devoxx UK, etc.
@JsonMixin…UPDATES
Spring Security 5.7.0, 5.6.4, 5.5.7 were released to fix CVE-2022-22978 : Authorization Bypass in RegexRequestMatcher. Please update as soon as possible.
Spring Security 5.7.0, 5.6.4, 5.5.7 were released to fix CVE-2022-22976: BCrypt skips salt rounds for work factor of 31. Please update as soon as possible.
UPDATES
Spring Security 5.7.0 (release notes), 5.6.4 (release notes), 5.5.7 (release notes) have been released which fix
Please update as soon as possible.
On behalf of the Data Team and everyone who contributed, I'm pleased to announce the GA release of the 2021.2 release train as well as the 4th Milestone of the 2022.0 one.
Already working on the 2022.0 train, based on Spring Framework 6, Java17 and Jakarta EE 9, the 2021.2 release ships bug fixes and selected back ported features.
Other than dependency upgrades, these are some of the major changes:
IdClass handling in data-jpa.Update methods in data-mongodb.data-elasticsearch.data-cassandra.Hi, Spring fans! In this episode, Josh Long (@starbuxman) talks to fellow Java Champion, EasyMock engineer, and Java luminary, JUG leader, and legend Henri Tremblay (@henri_tremblay)
On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 6.0.0-M4 is available now.
Spring Framework 6.0.0-M4 ships with all the fixes from 5.3.20 released yesterday, and also includes 39 fixes and improvements specific to the 6.0 branch.
On behalf of the team and everyone who has contributed, I am pleased to announce that Spring Framework 5.3.20 and 5.2.22 are available now.
Spring Framework 5.3.20 includes 14 fixes and improvements.
Spring Framework 5.2.22 includes 2 backports.
In addition, these releases include fixes for 2 vulnerabilities:
CVE-2022-22970
"Spring Framework DoS via Data Binding to MultipartFile or Servlet Part"
Denial of Service (DoS) attack in Spring MVC or Spring WebFlux applications that handle file uploads and rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.
Severity: Medium
CVE-2022-22971
"Spring Framework DoS with STOMP over WebSocket"
Denial of service (DoS) attack by authenticated users in Spring applications with a STOMP over WebSocket endpoint.
Severity: Medium
Hi, Spring fans! I'm writing this from - I can't believe I get to say this - abroad! I'm in London, UK! Now, this is not particularly noteworthy for those millions who already live here. But I don't live here. I'm a visitor! I live in San Francisco. I had to fly here! On a plane! With other people! ACROSS THE OCEAN. This is my first international flight since March of 2020, and I couldn't be more excited to be here for Devoxx UK and also just to catch up with old friends I haven't seen in nearly three years. If you know me, and how I used to travel, you'll appreciate how odd it is for me to be…
VMware offers training and certification to turbo-charge your progress.
Learn moreTanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.
Learn moreCheck out all the upcoming events in the Spring community.
View all