CVE-2018-1270 was reported last week, and unfortunately, was not fully addressed in the 4.3.x branch of the Spring Framework.

A follow-up 4.3.16 version was created and released to Maven Central, and a new CVE-2018-1275 report was published. Please upgrade to 4.3.16 immediately!

Spring Boot 1.5.x Instructions: if impacted by this issue, please upgrade to Spring Boot 1.5.12.

I am pleased to announce that Spring IO Platform Brussels-SR8 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring AMQP 1.7.7
• Spring Batch 3.0.9
• Spring Boot 1.5.11
• Spring Data Ingalls SR11
• Spring Framework 4.3.15
• Spring Integration 4.3.15
• Spring Kafka 1.1.8
• Spring Security 4.2.5
• Spring Session 1.3.2
• Spring Social 1.1.6

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

I’m pleased to announce the releases of Spring Security 5.0.4 and 4.2.5. Both releases primarily deliver bug fixes and dependency version updates along with some minor improvements.

For a complete list of changes, please refer to the 5.0.4 changelog and 4.2.5 changelog.

Project Site | Reference | Help

On behalf of the community, I’d like to announce the availability of Spring Vault service releases 1.1.2 and 2.0.1, available from Maven Central.

Both releases primarily deliver bug fixes and dependency version updates along with some minor improvements.

For a complete list of changes see the changelogs of 1.1.2 RELEASE and 2.0.1 RELEASE.

Project Page | GitHub | Issues | Documentation for 1.1.2.RELEASE | Documentation for 2.0.1.RELEASE | Stack Overflow

On behalf of the team, I am pleased to announce that Spring Boot 1.5.11 has been released and is is now available from repo.spring.io and Maven Central.

Spring Boot 1.5.11 includes over 70 fixes, improvements and dependency updates. Thanks to all that have contributed with issue reports and pull requests.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter.

Project Page | GitHub | Issues | Documentation | Stack Overflow | …

Hot on the heels of Spring Boot 1.5.11, Spring Boot 2.0.1 is now available from repo.spring.io and Maven Central.

The first maintenance release of Spring Boot 2 includes over 160 fixes, improvements and dependency updates. Thanks to all that have contributed with issue reports and pull requests.

Note that the Spring Framework versions included in both Spring Boot releases contain fixes that address multiple vulnerability reports. Please see this blog post for more details.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…

It's my pleasure to announce that Spring REST Docs 1.2.4.RELEASE is available from Maven Central, JCenter, and our release repository. My thanks to everyone who contributed to this release by reporting bugs and opening pull requests.

This maintenance release includes a handful of bug fixes and documentation improvements. It is a recommend upgrade for all Spring REST Docs 1.x users.

GitHub | Issues | Documentation | Twitter | Gitter | Stack Overflow

It's my pleasure to announce that Spring REST Docs 2.0.1.RELEASE is available from Maven Central, JCenter, and our release repository. My thanks to everyone who contributed to this release by reporting bugs and opening pull requests.

This maintenance release includes 12 bug fixes, documentation improvements, and dependency upgrades. It is a recommend upgrade for all Spring REST Docs 2.x users.

GitHub | Issues | Documentation | Twitter | Gitter | Stack Overflow

On behalf of the Spring Data team, I'm pleased to announce the Ingalls SR11 and Kay SR6 service releases. The Ingalls service release ships on top of the just-released Spring Framework 4.3.15 and in preparation of the upcoming Spring Boot 1.5.11 release. The Kay service release picks up Spring Framework 5.0.5 and will be picked up by Spring Boot 2.0.1 for your convenience.

Both releases ship with 158 tickets fixed in total and are recommended upgrades to all users of the Ingalls and Kay release trains. You can find all details within the linked changelogs.

Ingalls SR 11

• Spring Data Commons 1.13.11 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data JPA 1.11.11 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data MongoDB 1.10.11 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data for Apache Cassandra 1.5.11 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data for Apache Solr 2.1.11 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data GemFire 1.9.11 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data KeyValue 1.2.11 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Neo4j 4.2.11 - Artifacts - JavaDocs - Documentation - …