CVE-2014-3527 Fixed in Spring Security 3.2.5 and 3.1.7

Releases | Rob Winch | August 15, 2014 | ...

Spring Security 3.2.5 (change log) and 3.1.7 (change log) have been released and are available in Maven Central. Important highlights of this release are:

  • This release contains a fix for CVE-2014-3527 which resolves an issue where a malicious CAS Service can impersonate another CAS Service when using proxy tickets.
  • This release updates the transitive dependencies of the cas module to cas-client-core which has a fix for CVE-2014-4172. This issue was not in Spring Security itself, but the library in which it depends on.

A special thanks to Scott Battaglia & the rest of the CAS team for…

Spring Framework 4.1 RC2 Released

Releases | Stéphane Nicoll | August 15, 2014 | ...

On behalf of the team I am pleased to announce the second release candidate of Spring Framework 4.1 is now available from our milestone repository. This release includes over 70 fixes and improvements.

Spring 4.1 is really coming up soon: please try it out and let us know if you run into any issue. We're looking forward to getting in touch via Twitter, StackOverflow or JIRA.

SpringOne 2GX 2014 is around the corner

Book your place at SpringOne in Dallas, TX for Sept 8-11 soon. It's simply the best opportunity to find out first hand all that's going on and to provide direct feedback. There will…

First Release Candidate of Spring Data Release Train Evans Available

Releases | Christoph Strobl | August 13, 2014 | ...

We are happy to announce the first release candidate of the Spring Data release train Evans. We ship the following modules:

Spring MVC Test HtmlUnit 1.0.0.M2 Released

Releases | Rob Winch | August 06, 2014 | ...

I'm pleased to announce the second milestone release of Spring MVC Test HtmlUnit.

The project’s aim is to provide integration between [Spring MVC Test](Spring MVC Test Framework) and HtmlUnit. This simplifies performing end to end testing when using HTML based views.

Changelog

You can view the complete changelog on github. Below are the highlights of the release:

  • The release contains Reference Documentation and Publishes the API Docs
  • The artifact name has changed from spring-test-mvc-htmlunit to spring-test-htmlunit See the Updating Dependencies to see how to add Spring MVC Test HtmlUnit as either a Maven or Gradle dependency
  • The project name has been changed to Spring MVC Test HtmlUnit in order to better align with Spring MVC Test's name
  • Context root of "" is now supported
  • Support for external resources has been added. See the javadoc of DelegatingWebConnection for additional details.
  • Bug fixes

Spring XD 1.0 GA Released

Releases | Mark Pollack | July 30, 2014 | ...

On behalf of the Spring XD team, I am very pleased to announce the general availability of Spring XD 1.0! You can download the zip distribution. You can also install on OSX using homebrew and on RHEL/CentOs using yum.

Spring XD's goal is to be your one stop shop for developing and deploying Big Data Applications. Such applications require a wide range of technologies to address different use-cases while interoperating as a cohesive process. The steps in this process include:

  • Data collection
  • Real-time streaming and analytics
  • Data cleansing
  • Batch processing (both on and off Hadoop)
  • Machine learning and exploratory data analysis
  • Visualization and Reporting
  • Closed loop analytics between real-time and batch processing

Spring Batch Admin 1.3.0.RELEASE Is Available

Releases | Michael Minella | July 28, 2014 | ...

We are pleased to announce that Spring Batch Admin 1.3.0.RELEASE is now available via Maven Central, Github and the SpringSource download repository. This release provides updates to Spring Batch Admin to make it compatible with Spring Batch 2.2.x and beyond. In addition to the minor functional updates, this release also provides an overall update to third party dependencies. As noted previously, this will be the last major version with the spring-batch-integration module included as it has been moved to Spring Batch as of Spring Batch 3.0. As always, we look forward to your feedback in…

Spring Data Dijkstra SR2 released

Releases | Oliver Drotbohm | July 28, 2014 | ...

On behalf of the Spring Data team I am pleased to announce the availability of the second service release of the Dijkstra release train. It includes 49 fixes overall for the following modules:

Spring Framework 4.1 release candidate available

Releases | Juergen Hoeller | July 21, 2014 | ...

Dear Spring community,

It's my pleasure to announce that the first Spring Framework 4.1 release candidate is available now. Our 4.1 delivers a wide range of new features along the following themes:

Annotated JMS listener methods and support for JMS 2.0's shared subscriptions

As well as general alignment of Spring's JMS support with our spring-messaging module. https://spring.io/blog/2014/04/30/spring-4-1-s-upcoming-jms-improvements

Comprehensive support for JCache (JSR-107) annotations and related features

https://spring.io/blog/2014/04/14/cache-abstraction-jcache-jsr-107-annotations-support

Spring XD 1.0.0.RC1 Released

Releases | Mark Pollack | July 18, 2014 | ...

The Spring XD team is pleased to announce that Spring XD Release Candidate 1 is now available for download. You can also install Spring XD on OSX using homebrew and on RHEL/CentOs using yum.

Highlights of this release

  • Direct binding: Deployments can be configured to avoid modules sending data over the Message Bus if they are co-located in the same container. Using this option increases throughput and lowers latency but can not be applied to all deployment topologies.
  • Stream Deployment State: The state of stream is calculated throughout the lifetime of the deployment. For example, if a subset of the modules that comprise a stream have failed, the overall state of the stream changes from Deployed to Incomplete. Once the failures have been addressed, the state of the stream returns to Deployed.
  • Improved REST API

Get the Spring newsletter

Thank you for your interest. Someone will get back to you shortly.

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all