I had a look, and the PR is building. Checking release notes: - https://github.com/spring-projects/spring-framework/releases/tag/v5.3.26 - https://github.com/spring-projects/spring-security/releases/tag/5.7.7
It is unclear from the changes if another 2.23-RC2 is needful, please advise. Jody On Sun, Mar 26, 2023 at 7:06 AM Jody Garnett <[email protected]> wrote: > Right, keep in mind we do not advertise security details such as CVEs > until an update is available for stable and maintenance active branches. > > Please discuss on geoserver-security email list if you wish to assess and > coordinate a maintenance release for example. > > On Sun, Mar 26, 2023 at 6:28 AM mark <[email protected]> wrote: > >> https://osgeo-org.atlassian.net/browse/GEOS-10907 >> >> >> -------- Doorgestuurd bericht -------- >> Onderwerp: Re: [Geoserver-devel] geoserver 2.23.0 release train starting >> next release >> Datum: Sun, 26 Mar 2023 15:17:37 +0200 >> Van: mark <[email protected]> >> Aan: Jody Garnett <[email protected]> >> >> Op 26-03-2023 om 06:38 schreef Jody Garnett: >> > Thanks to everyone who has tested 2.23-RC and reported back - your >> > participation really helps. >> > >> > I would like to schedule the release for next week - so if you have any >> > bug fixes to get in please speak up now. >> >> I'd like to patch/fix this: >> https://github.com/geoserver/geoserver/security/dependabot/159 >> >> using >> >> https://github.com/geoserver/geoserver/pull/6718 >> >> -M >> >> >> >> _______________________________________________ >> Geoserver-devel mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/geoserver-devel >> > -- > -- > Jody Garnett > -- -- Jody Garnett
_______________________________________________ Geoserver-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-devel
