We are pleased to announce the relase of Spring Security 2.0.8, 3.0.8, and 3.1.3 which fixes CVE-2012-5055 and brings Spring Security's open bugs to 0. For details, see the announcement.