===================================================================                               CERT-Renater

                     Note d'Information No. 2021/VULN132
_____________________________________________________________________

DATE                : 31/03/2022

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Spring Boot versions prior to
                                   2.6.6, 2.5.12.

====================================================================https://spring.io/blog/2022/03/31/spring-boot-2-6-6-available-now
https://spring.io/blog/2022/03/31/spring-boot-2-5-12-available-now
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
_____________________________________________________________________

  Spring Boot 2.6.6 available now

Releases
Stéphane Nicoll
March 31, 2022


On behalf of the team and everyone who has contributed, I’m happy to 
announce that Spring Boot 2.6.6 has been released and is now available 
from Maven Central.

The Spring Framework version in this release includes a fix for 
CVE-2022-22965, check the dedicated blog post for more details.

This release includes 6 bug fixes, documentation improvements, and 
dependency upgrades. Thanks to all those who have contributed with issue 
reports and pull requests.
How can you help?

If you’re interested in helping out, check out the “ideal for 
contribution” tag in the issue repository. If you have general 
questions, please ask on stackoverflow.com using the spring-boot tag or 
chat with the community on Gitter.

_____________________________________________________________________

  Spring Boot 2.5.12 available now

Releases
Stéphane Nicoll
March 31, 2022


On behalf of the team and everyone who has contributed, I’m happy to 
announce that Spring Boot 2.5.12 has been released and is now available 
from Maven Central.

The Spring Framework version in this release includes a fix for 
CVE-2022-22965, check the dedicated blog post for more details.

This release includes 5 bug fixes, documentation improvements, and 
dependency upgrades. Thanks to all those who have contributed with issue 
reports and pull requests.
How can you help?

If you’re interested in helping out, check out the “ideal for 
contribution” tag in the issue repository. If you have general 
questions, please ask on stackoverflow.com using the spring-boot tag or 
chat with the community on Gitter.


========================================================+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=======================================================