VMware offers training and certification to turbo-charge your progress.Learn more
On behalf of the entire team I'd like to announce the availability of two service releases for Spring Data release trains: Hopper SR4 and Gosling SR6. The releases are recommended upgrades as they contain fixes for a CVE in Spring Data JPA.
Spring Boot 1.3.8 and 1.4.1 users got Hopper SR3 and Gosling SR5 shipped out of the box. Those releases also already contain the fixes for CVE but unfortunately broke Java 6 compatibility. To re-instantiate the latter, please upgrade to the latest ones by setting the
spring-data-releasetrain.version property to the corresponding value. Non-Boot users can just upgrade to the new BOM. As usual, the next Spring Boot releases will pick up the improved fixes as part of their dependency upgrades.
Here's the content of the releases: