springframework-developer

[Springframework-developer] Security advisory for all Acegi Security users

[Ben A. <ben...@ac...>]

Dear Spring Community

A potentially serious bug has been identified in existing releases of 
Acegi Security 
(http://opensource.atlassian.com/projects/spring/browse/SEC-20). New and 
supported releases (0.7.1 and 0.8.3) are now available that correct this 
issue. We urge all users to upgrade as soon as possible:

* Users of CVS HEAD should rebuild from the current CVS HEAD
* Users of releases 0.8.0, 0.8.1 or 0.8.2 should upgrade to release 0.8.3
* Users of release 0.7.0 should upgrade to release 0.7.1, or preferably 
release 0.8.3
* Users of releases prior to 0.7.0 should upgrade to 0.7.1, or 
preferably release 0.8.3

You can download these releases directly from 
https://sourceforge.net/project/showfiles.php?group_id=104215.

If anyone has any questions, please email the acegisecuity-developer 
mailing list.

Cheers
Ben

[Springframework-developer] Spring 1.2 Support for JDK 1.3

[Ben A. <ben...@ac...>]

Scott McCrory wrote:

>In short, I'd be just a tiny voice asking for Spring 1.2+ to maintain JDK 
>1.3 compatability, but is it too late to decouple Acegi from Spring 1.2+?
>  
>
I'll move this to the Spring Developers mailing list, as it's more 
related to Spring than Acegi Security. Juergen posted an email in April 
that gave me the impression Spring's JDK 1.3 support was pretty good: 
http://thread.gmane.org/gmane.comp.java.springframework.devel/8208. Is 
this no longer the case?

We would have a difficult time maintaining support for multiple Spring 
versions in Acegi Security. I would prefer to know that Spring 1.2 
definitely could not support JDK 1.3 before going down that path.

Cheers
Ben

Re: [Springframework-developer] Spring 1.2 Support for JDK 1.3

[Juergen H. <ju...@in...>]

I'm a little unclear where that discussion started... Any JDK 1.3
compatibility issues with Spring and/or Acegi?

I can assure you that Spring 1.2.x and also Spring 1.3.x will continue to
support JDK 1.3 as far as possible. In parallel, we do support a number of
JDK 1.4 and 1.5 features where it makes sense, without tying the overall
framework to those versions.

BTW, Spring can currently be built on either JDK 1.5 or 1.4. On 1.4, it will
simply not include the JDK 1.5 support, resulting in slightly smaller jar
files. In any case, almost everything will run on JDK 1.3 as well; Spring is
built with "-target 1.3".

If built on JDK 1.4 ("buildtests"), the test suite can even be run on 1.3
("tests"): all 1.4-dependent tests will simply be excluded then. This is
what I'm running before every release as a sanity check for 1.3
compatibility.

Juergen
 

-----Original Message-----
From: spr...@li...
[mailto:spr...@li...] On Behalf Of
Ben Alex
Sent: Wednesday, July 13, 2005 4:49 AM
To: spr...@li...
Cc: ace...@li...
Subject: [Springframework-developer] Spring 1.2 Support for JDK 1.3

Scott McCrory wrote:

>In short, I'd be just a tiny voice asking for Spring 1.2+ to maintain 
>JDK
>1.3 compatability, but is it too late to decouple Acegi from Spring 1.2+?
>  
>
I'll move this to the Spring Developers mailing list, as it's more related
to Spring than Acegi Security. Juergen posted an email in April that gave me
the impression Spring's JDK 1.3 support was pretty good: 
http://thread.gmane.org/gmane.comp.java.springframework.devel/8208. Is this
no longer the case?

We would have a difficult time maintaining support for multiple Spring
versions in Acegi Security. I would prefer to know that Spring 1.2
definitely could not support JDK 1.3 before going down that path.

Cheers
Ben


-------------------------------------------------------
This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening
July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual
core and dual graphics technology at this free one hour event hosted by HP,
AMD, and NVIDIA.  To register visit http://www.hp.com/go/dualwebinar
_______________________________________________
Springframework-developer mailing list
Spr...@li...
https://lists.sourceforge.net/lists/listinfo/springframework-developer

[Springframework-developer] Spring 1.2 Support for JDK 1.3

[Ben A. <ben...@ac...>]

Hi Juergen

Juergen Hoeller wrote:

>I'm a little unclear where that discussion started... Any JDK 1.3
>compatibility issues with Spring and/or Acegi?
>  
>
As you may recall, the Ant Path changes between 1.1.x and 1.2.x required 
us to release Acegi Security 0.8.2. I then provided a new release, 0.8.3 
which was based on 0.8.2 to correct a potentially serious bug. There was 
concern that a version based on 0.8.1 should also be created, as some 
people are using Spring 1.1.x because they believed Spring 1.2.x did not 
support JDK 1.3. I did release 0.8.1.1 JARs for such users (available at 
http://acegisecurity.sourceforge.net/maven/acegisecurity/jars for those 
needing it), but I'll refrain from performing an official release 
because your clarification below indicates these users should have no 
major road-block moving to 1.2.x and thus 0.8.3.

>I can assure you that Spring 1.2.x and also Spring 1.3.x will continue to
>support JDK 1.3 as far as possible. In parallel, we do support a number of
>JDK 1.4 and 1.5 features where it makes sense, without tying the overall
>framework to those versions.
>  
>
>
Thanks for clarifying this.

Cheers
Ben