Security Report for Spring AMQP (Spring for RabbitMQ)

Engineering | Gary Russell | November 29, 2021 | ...

The recently released versions of Spring AMQP (2.4.0, 2.3.12, 2.2.20) contain a fix for CVE-2021-22095, which can cause a potential OutOfMemoryError for very large messages.

Spring Boot version 2.6.0 and 2.5.7 will bring in the 2.4.0 and 2.3.12 versions of spring-amqp respectively. Users of Boot 2.4.x should override the spring-amqp and spring-rabbit versions to 2.3.12; users of Spring Boot 2.3.x should override the versions to 2.2.20.

Spring Data MongoDB - Relation Modelling

Engineering | Christoph Strobl | November 29, 2021 | ...

MongoDB’s flexible schema allows for multiple patterns when it comes to modeling relationships between entities. Also, for many use cases, a denormalized data model (storing related data right within a single document) might be the best choice, because all information is kept in one place, so that the application requires fewer queries to fetch all data. However, this approach also has its downsides, such as potential data duplication, larger documents, and the maximum document size.

In general, MongoDB recommends using normalized data models when the advantages of embedding are neglected by the implications of duplication. In this blog post, we take a look at the different possibilities of linking documents with manual references and DBRefs

This Week in Spring (Happy Thanksgiving!) - November 23rd, 2021

Engineering | Josh Long | November 23, 2021 | ...

Hi, Spring fans! Welcome to another installment of This Week in Spring!

Hi, Spring fans! Welcome to another installment of This Week in Spring. This Thursday is Thanksgiving here in the US, where I live. it's a time during which we Americans try to be thankful for what we have. And me, personally? I've got a lot of things for which I am grateful, this week and always.

I am thankful for my family and friends. A person is the company they keep, and I am lucky to have excellent company in my life.

I am thankful for my health. Right now, pandemic be danged, I'm healthy and happy, something for…

Get to Know a Kubernetes Operator!

Engineering | Josh Long | November 19, 2021 | ...

Hi, Spring fans! It's Friday, and you know what that means? Some poor schlub somewhere is trying fruitlessly to get something deployed to production, or at least rolled back consistently, in time for dinner. And it's not working. I've been there. Deployments are hard. There's nuance in deployment. I love Kubernetes as much as the next Operator, but let's not pretend it's the pinnacle of productivity. Quite the contrary. There's a whole cottage industry around simplifying application deployments with Kubernetes. See for example KNative, Cloud Foundry on Kubernetes, or Azure Spring Cloud

This Week in Spring - November 16th, 2021

Engineering | Josh Long | November 16, 2021 | ...

Hi, Spring fans! Can you believe it's nearly December 2021? I'm still getting used to the idea that we're already in 2021 and now the year's nearly behind us! Stop the world, I want off! Time's flying.

I've been up to my eyeballs in Spring Tips video production. I can't wait for you to see tomorrow's installment (@SpringTipsLive)!

We've also got some great podcast interviews lined up. As always, new episodes drop on Apple Podcasts, Spotify, etc., every Thursday night (California time)/Friday (for most of the world). Don't miss it (@BootifulPodcast)!

You could also just check out my blog (joshlong.com) for the upcoming appearances, podcasts, Spring Tips videos, etc. The trouble is that the blog is otherwise pretty boring. My boring content notwithstanding, it's a plain l'il page on the internet, and I've been wanting to mix it up…

Get the Spring newsletter

Thank you for your interest. Someone will get back to you shortly.

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all