Spring Boot 2.6.6 to fix Spring4Shell

Matt Raible

unread,

Mar 31, 2022, 10:47:03 AM3/31/22

to JHipster dev team

Hi team,

Do you think we should upgrade to Spring Boot 2.6.6 (just released) and do a patch release? This release fixes the Spring4Shell vulnerability.

https://github.com/spring-projects/spring-boot/issues/30494

At the very least, we should advise our users to upgrade their own projects.

Thanks,

Matt

Pierre Besson

unread,

Mar 31, 2022, 10:53:02 AM3/31/22

to Matt Raible, JHipster dev team

+1

--
You received this message because you are subscribed to the Google Groups "JHipster dev team" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jhipster-dev...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jhipster-dev/A82C7404-7A7E-4605-9017-CB65A734D95D%40raibledesigns.com.

Deepu K Sasidharan

unread,

Mar 31, 2022, 10:53:37 AM3/31/22

to Pierre Besson, Matt Raible, JHipster dev team

+100

Thanks & Regards,

Deepu

To view this discussion on the web visit https://groups.google.com/d/msgid/jhipster-dev/CAE4q%3DMQ-tTsj8ySxmuK7WcjOTbc1mYruBAZUEUWB37unaqpeKA%40mail.gmail.com.

Pascal GRIMAUD

unread,

Mar 31, 2022, 10:56:53 AM3/31/22

to Deepu K Sasidharan, Pierre Besson, Matt Raible, JHipster dev team

I can start to prepare the release tomorrow afternoon

To view this discussion on the web visit https://groups.google.com/d/msgid/jhipster-dev/CAFXry55oGQ0d7cyA7rMMdgq1BAEJUtL07sAj0rvVw4bq3XC4-w%40mail.gmail.com.

Daniel Franco

unread,

Mar 31, 2022, 2:30:54 PM3/31/22

to Pascal GRIMAUD, Deepu K Sasidharan, Pierre Besson, Matt Raible, JHipster dev team

Will create the PR asap.

To view this discussion on the web visit https://groups.google.com/d/msgid/jhipster-dev/CALUG8VuSeTT0E5%2B1qmFyc%2BQfM%2BjRDC5PEYo480ft1XdZh-4DZA%40mail.gmail.com.

Reply all

Reply to author

Forward