<Past |
Future> |
3.0 |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
3.1 |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
3.1.3 |
Approved w/Constraints [1, 2] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Divest [2, 3, 4] |
Divest [2, 3, 4] |
Divest [2, 3, 4] |
Divest [2, 4, 5] |
Divest [2, 4, 5] |
Divest [2, 4, 5] |
Divest [2, 4, 5] |
Divest [2, 4, 5] |
Divest [2, 4, 5] |
3.2.x |
Unapproved |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
4.0.x |
Unapproved |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 3, 4] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
4.1.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
4.2.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
Approved w/Constraints [2, 4, 5] |
5.0.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
5.1.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
5.2.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
5.3.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
5.4.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
5.5.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
5.6.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
5.7.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
5.8.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
6.0.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
6.1.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
6.2.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
6.3.x |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
Unapproved |
| | [1] | Spring Framework relies on Maven for project building and integration. Although, VA`s approved technology for building and continuous integration is the Rational Build Forge (RBF) tool. Development teams need to ensure their projects integrate well with RBF either directly or by scripting Maven with RBF. Additionally, users must utilize version 3.1.3 or higher due to common vulnerability exposure (CVE-2012-5055) associated with older versions and users must ensure that all patches and updates are applied in accordance with VA Handbook 6500 policy. | | [2] | Due to National Institute of Standards and Technology (NIST) identified security vulnerabilities, extra vigilance should be applied to ensure the versions remain properly patched to mitigate known and future vulnerabilities. The local ISO can provide assistance in reviewing the NIST vulnerabilities. | | [3] | Since Spring Framework relies on Maven for project building and integration and the approved VA technology for building and continuous integration is Rational Build Forge (RBF), the development teams need to make sure their projects integrate well with RBF either directly or by scripting Maven with RBF. Additionally, users must utilize version 3.1.3 or higher due to common vulnerability exposure (CVE-2012-5055) associated with older versions and users must ensure that all patches and updates are applied in accordance with VA Handbook 6500 policy. | | [4] | Users should check with their supervisor, Information Security Office (ISO) or local OIT representative for permission to download and use this software. Downloaded software must always be scanned for viruses prior to installation to prevent adware or malware. Freeware may only be downloaded directly from the primary site that the creator of the software has advertised for public download and user or development community engagement. Users should note, any attempt by the installation process to install any additional, unrelated software is not approved and the user should take the proper steps to decline those installations. | | [5] | Spring Framework relies on Maven for project building and integration and the approved VA technology for building and continuous integration is Rational Build Forge (RBF). Development teams must make sure their projects integrate with RBF either directly or by scripting Maven with RBF. Additionally, users must utilize version 3.1.3 or higher due to security vulnerabilities associated with older versions. |
|
Note: |
At the time of writing, version 6.3.1 is the most current version, released 06/17/2024. |