I had a look, and the PR is building. Checking release notes: - https://github.com/spring-projects/spring-framework/releases/tag/v5.3.26 - https://github.com/spring-projects/spring-security/releases/tag/5.7.7
It is unclear from the changes if another 2.23-RC2 is needful, please advise. Jody On Sun, Mar 26, 2023 at 7:06 AM Jody Garnett <jody.garn...@gmail.com> wrote: > Right, keep in mind we do not advertise security details such as CVEs > until an update is available for stable and maintenance active branches. > > Please discuss on geoserver-security email list if you wish to assess and > coordinate a maintenance release for example. > > On Sun, Mar 26, 2023 at 6:28 AM mark <mc.pr...@gmail.com> wrote: > >> https://osgeo-org.atlassian.net/browse/GEOS-10907 >> >> >> -------- Doorgestuurd bericht -------- >> Onderwerp: Re: [Geoserver-devel] geoserver 2.23.0 release train starting >> next release >> Datum: Sun, 26 Mar 2023 15:17:37 +0200 >> Van: mark <mc.pr...@gmail.com> >> Aan: Jody Garnett <jody.garn...@gmail.com> >> >> Op 26-03-2023 om 06:38 schreef Jody Garnett: >> > Thanks to everyone who has tested 2.23-RC and reported back - your >> > participation really helps. >> > >> > I would like to schedule the release for next week - so if you have any >> > bug fixes to get in please speak up now. >> >> I'd like to patch/fix this: >> https://github.com/geoserver/geoserver/security/dependabot/159 >> >> using >> >> https://github.com/geoserver/geoserver/pull/6718 >> >> -M >> >> >> >> _______________________________________________ >> Geoserver-devel mailing list >> Geoserver-devel@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/geoserver-devel >> > -- > -- > Jody Garnett > -- -- Jody Garnett
_______________________________________________ Geoserver-devel mailing list Geoserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-devel
