On behalf of the entire team I'd like to announce the availability of two service releases for Spring Data release trains: Hopper SR4 and Gosling SR6. The releases are recommended upgrades as they contain fixes for a CVE in Spring Data JPA.

Spring Boot 1.3.8 and 1.4.1 users got Hopper SR3 and Gosling SR5 shipped out of the box. Those releases also already contain the fixes for CVE but unfortunately broke Java 6 compatibility. To re-instantiate the latter, please upgrade to the latest ones by setting the spring-data-releasetrain.version property to the corresponding value. Non-Boot users can just upgrade to the new BOM. As usual, the next Spring Boot releases will pick up the improved fixes as part of their dependency upgrades.

Here's the content of the releases:

Spring Data Hopper SR4

• Spring Data Commons 1.12.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data JPA 1.10.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data KeyValue 1.1.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data for Apache Cassandra 1.4.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data for Apache Solr 2.0.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Gemfire 1.8.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Neo4j 4.1.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data MongoDB 1.9.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Envers 1.0.4 - Artifacts - JavaDocs - Documentation
• Spring Data REST 2.5.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Redis 1.7.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Elasticsearch 2.0.4 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Couchbase 2.1.4 - Artifacts - JavaDocs - Documentation - Changelog

Spring Data Gosling SR6

• Spring Data Commons 1.11.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data JPA 1.9.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data KeyValue 1.0.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data for Apache Cassandra 1.3.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data for Apache Solr 1.5.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Gemfire 1.7.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Neo4j 3.4.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data MongoDB 1.8.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data REST 2.4.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Redis 1.6.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Elasticsearch 1.3.6 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Couchbase 1.4.6 - Artifacts - JavaDocs - Documentation - Changelog