Spring Security 2.0.7, 3.0.7 and 3.1.0.RC3 Released

[Luke Taylor]

New releases are available for all currently supported versions of Spring Security. These contain fixes for various security vulnerabilities (details of which can be found on the SpringSource web site) as well as bug fixes and general feature enhancements.

Note that there are also related vulnerabilities in Spring Framework, so users should also upgrade to Spring 3.0.6.

[Bron]

The 3.0.6 and 3.0.7 downloads do not seem to be working from the download page. However, I can download 3.0.5 just fine.

Firefox 6.0.2 shows me errors like the following:

<Error>
  <Code>AccessDenied</Code>
  <Message>Access Denied</Message>
  <RequestId>544EE83B155C7CC3</RequestId>
  <HostId>diqy+dqcUaDWm/b/3NXkTyeCekPRHW5gYOwu7LbICdi2Sptsg5bY6lWf7/J7fzxT</HostId>
</Error>

I also tried IE9.

[Luke Taylor]

Sorry about that. Looks like I forgot to set the ACL to public. Should be OK now.

[Bron]

Yep. It's working now. Thanks.

[autumn85]

hi, here http://static.springsource.org/sprin...downloads.html it says that the Version 3.1.0.RC3 is "not intended for production use". Is there a roadmap when a version will be released that is intended for production use?

specifically i'm interested in a version that is both intended for production use and has the fix for this issue https://jira.springsource.org/browse...nel#issue-tabs. in this issue the Fix Version/s: says 3.1.0.M1 but when i look at all the issues that were fixed in that version (https://jira.springsource.org/browse...rversion/11174) it doesn't contain SEC-1171.

thanks in advance.

[dlmiles]

http://www.springsource.org/download (this still lists 3.0.5.RELEASE as the current version, but doing the download will put in front of you the 3.0.7.RELEASE, so not a major problem but the release engineering task list might want to add this point for future).

[jacomoman]

For whatever reason I no longer see Spring Framework 3.0.7 listed under the community download page. It was there just yesterday. Did something happen? Did it get moved? Where to?

[Bron]

For whatever reason I no longer see Spring Framework 3.0.7 listed under the community download page. It was there just yesterday. Did something happen? Did it get moved? Where to?

Click "More >>" right below the latest GA release for Spring Framework.