皇上,还记得我吗?我就是1999年那个Linux伊甸园啊-----24小时滚动更新开源资讯,全年无休!

Spring Data 2021.2.1 、2021.1.5 发布

Spring Data 2021.2.1 、2021.1.5 发布

On behalf of the team, I’m pleased to announce Spring Data service releases 2021.2.1 and 2021.1.5.
Both releases ship with a fix for mostly bug fixes and dependency upgrades.
For your convenience, Spring Boot 2.7.1 respective 2.6.9 are going to pick up these releases in the upcoming days.

In addition, these releases include fixes for one vulnerability:

  • CVE-2022-22980
    “Spring Data MongoDB SpEL Expression Injection Vulnerability”
    SpEL injection attack in MongoDB applications through repository query methods annotated with @Query or @Aggregation using parametrized SpEL statements with non-sanitized input.
    Severity: High

These new versions are recommended upgrades for all Spring Data production scenarios.

To round things off, here are the links to the individual modules, changelogs, and documentation:

2021.2.1

2021.1.5

转自 Spring Data 2021.2.1 and 2021.1.5 released