I resolve some fixes vulnerabilites in a java application and we have a critical issue https://nvd.nist.gov/vuln/detail/cve-2016-1000027 the point here is the current version of springboot is 2.7.2 and migrate version for use springboot 3.0.0 the camel 3 context not load, Does anyone know if spring boot 3 is compatible with any version of camel3?
Camel 4 will support Spring Boot 3. Until then, I'd recommend upgrading to the latest Spring Boot 2.7.x release.
Related
There is a vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2021-22047) discovered in spring-data-rest-webmvc which is only fixed in versions 3.4.14 and 3.5.6. Spring Boot 2.3.12 uses the version 3.3.9. Migrating to spring boot 2.4.x or above is not an option for us.
We would like to use spring-data-rest-webmvc:3.4.14, but we are not sure if it's compatible with spring boot 2.3.x.
Can we use them together?
Spring Data Rest version 3.4 and up use Spring Framework version 5.3.x.
Spring Boot 2.3 is build with Spring Framework 5.2.x.
Will it work, probably, but there are no garanties that it will keep working or work at all. Most like it will fail with some NoSuchMethodError or ClassNotFOundExceptions or other exotic expetions one gets when mixing modules/jars from different versions of a framework.
The application is created using spring boot version 1.2.5 Release. I can see that it includes an embedded tomcat version which is 8.0.23. Is it possible to upgrade to a recent tomcat version, let's say, tomcat 9 with spring boot 1.2.5 and still run the application? Or do we need to upgrade the spring boot version to be compatible with tomcat 9? Is there any documentation for the spring boot version compatibility with Tomcat? Thank you.
Why do you want to upgrade it? What is the newer version of tomcat going to bring?
I personally go with the defaults for the spring version unless there is a specific need or issue.
That being said this question may have some pointers
How to change embedded tomcat's version in existing spring boot app?
You may be able to just set the property
9.0.5
It would be preferable to upgrade to the latest Spring Boot release (currently 2.2.5-RELEASE) to avail yourself of the latest features. There are many tutorials, migration guides, problem solutions, etc., out there to guide you, of which here are just a couple:
https://spring.io/blog/2018/03/12/upgrading-start-spring-io-to-spring-boot-2
Global CORS configuration breaks when migrating to Spring Boot 2.0.x
You didn't specify a reason for keeping your Spring Boot version at 1.2.5-RELEASE and only upgrading tomcat, but if you really must, there are other answers, such as here: How to change embedded tomcat's version in existing spring boot app?
My project is built with Spring boot 1.5.10.release. We want to migrate to Apache Kafka® 2.3.0 from Apache Kafka 1.0.x.
We are currently using Spring-kafka 1.3.9.release and want to migrate to spring-kafka-2.3.0. Can we do this without changing the Spring boot version of 1.5.10.release?
I went through the Compatibility matrix but I don't see any relevant answer to my question
https://spring.io/projects/spring-kafka
No, you can't do that. Spring Kafka 2.x, as well Spring Boot 2.x, is based on Spring Framework 5.x and Java 8. You can't mix so critical versions in Spring Boot 1.5.x.
It is really better to rely on the Spring Boot dependencies management. That way you can be sure that all the artifacts brought by Spring Boot are tested together.
We are currently using the following frameworks and its versions.
Spring Boot parent - 1.4.5.RELEASE
Vaadin-Bom - 7.7.3
Vaadin Spring Boot Starter - 1.1.0
Vaadin-Spring - 1.1.0
Planning to upgrade the spring boot parent version. But i'm sure if we upgrade the spring boot parent version, then need to upgrade the Vaadin dependencies.
I spent few days to find the latest Vaadin frameworks compatibility with the
Spring Boot jars. But couldn't able to arrive at solution. Could you please share your suggestions.
Thanks in Advance!!!
Since Vaadin 7 end-of-life happened already I would suggest migrating to Vaadin 8. You can check the versions in Vaadin 8 full stack app starter with Spring
We were starting to build a new web application and thought of using Spring 4.0. We wanted to use Spring security as well and I can see only 3.2.6 version is available for that. Just wanted to check if it is compatible with 4.0 or not?
Yes .Spring Security latest version 3.2.0 is built against Spring 3.2.6 , but it is tested against Spring 4.
If you use Maven , you have to resolve its transitive dependencies when using Spring 4 with Spring Security 3.2 .
For more information , please see this