On behalf of the team and everyone who has contributed, I am pleased to announce that Spring LDAP 2.4.4 and 3.2.8 are out! In both cases, the releases are mostly composed of bug fixes and dependency upgrades.

Importantly, these release addresses CVE-2024-38829.

To learn more, please visit the 2.4.4 and 3.2.8 release summaries.

Commercial customers using Spring Boot 2.7, 3.0, or 3.1 can update to Spring Boot 2.7.22.5, 3.0.17.5, or 3.1.13.5 respectively to receive the corresponding LDAP releases 2.4.4, 3.0.10, and 3.1.8. These hotfix versions are available now on the Spring commercial artifact repository and can be accessed with a Spring Enterprise Subscription.

Project Site | Reference | Help