I work in a project with Spring framework 3.2.6 and I now have to use spring security. I don't know what version spring security is compatible with spring framework 3.2.6
spring-security 3.2.0 is compatible with spring framework 3.2.6
https://mvnrepository.com/artifact/org.springframework.security/spring-security-core/3.2.0.RELEASE
Related
There is a vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2021-22047) discovered in spring-data-rest-webmvc which is only fixed in versions 3.4.14 and 3.5.6. Spring Boot 2.3.12 uses the version 3.3.9. Migrating to spring boot 2.4.x or above is not an option for us.
We would like to use spring-data-rest-webmvc:3.4.14, but we are not sure if it's compatible with spring boot 2.3.x.
Can we use them together?
Spring Data Rest version 3.4 and up use Spring Framework version 5.3.x.
Spring Boot 2.3 is build with Spring Framework 5.2.x.
Will it work, probably, but there are no garanties that it will keep working or work at all. Most like it will fail with some NoSuchMethodError or ClassNotFOundExceptions or other exotic expetions one gets when mixing modules/jars from different versions of a framework.
Is there a compatibility matrix for spring, spring security and spring webflow for recent releases resp. versions running under Java 7 and JSF 2.2? Or are simply all versions > some threshold compatible?
you can check on maven here and check the compile dependencies of the versions.
for example you can see that WebFlow 2.4.4 is compatible with Spring Security 4.1.0.RELEASE and Spring 4.3.0.RELEASE which is then compatible with jsf 2.2 (through spring-web)
I run spring boot 1.3.3.RELEASE, I have run into this issue that are solved in spring 4.3 https://jira.spring.io/browse/SPR-14114
When does spring boot support spring 4.3 ? Can I upgrade my spring-core dependency in current version of spring boot that I have.
When does spring boot support spring 4.3 ?
Spring Boot 1.4 will use Spring Framework 4.3 by default.
Can I upgrade my spring-core dependency in current version of spring boot that I have.
Yes. Spring Boot 1.3.x uses Spring Framework 4.2.x by default but it is compatible with Spring Framework 4.3.x. Assuming that you are using Maven and spring-boot-starter-parent as your pom's parent, you can use the spring.version property to control the version of Spring Framework that's used. For example:
<properties>
<spring.version>4.3.0.RC1</spring.version>
</properties>
We were starting to build a new web application and thought of using Spring 4.0. We wanted to use Spring security as well and I can see only 3.2.6 version is available for that. Just wanted to check if it is compatible with 4.0 or not?
Yes .Spring Security latest version 3.2.0 is built against Spring 3.2.6 , but it is tested against Spring 4.
If you use Maven , you have to resolve its transitive dependencies when using Spring 4 with Spring Security 3.2 .
For more information , please see this
Apache CXF is shipped with Spring 2.5.6, can I also use the Spring 3.0 framework without serious troubles.
Yes. I'm using CXF 2.2.7 and Spring 3.0.2 (The latest version) together without any issues.
You have to exclude CXF's Spring 2.5.6 dependavies otherwise the integration test in Spring Roo will not work