Spring Framework 4.1.7 & 3.2.14 released

Releases | Juergen Hoeller | June 30, 2015 | ...

Dear Spring community,

I'm pleased to announce that the Spring Framework 4.1.7 and 3.2.14 maintenance releases are available now. Aside from fixing various minor issues across the framework, these releases also address an XML parsing vulnerability through disabling DTD processing by default when parsing untrusted XML input in Spring MVC endpoints.

Note that Spring Framework 3.2.x has its End-of-Life scheduled for December 31, 2016. Based on demand and vulnerability reports, further maintenance releases will be made available up until then. At the same time, we strongly recommend a migration to Spring Framework 4.1.7 or the upcoming 4.2 at this point; please plan accordingly!

Cheers, Juergen

P.S.: Stay tuned for Spring Framework 4.2 RC2, following right away!

Get the Spring newsletter

Thank you!

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all