Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Spring Framework packages updated to stop multiple security risks
published 3 months ago
Summary
The Spring Framework libraries for AOP, ASM, aspects, beans, and context have been rebuilt to remove dozens of security weaknesses. Updating to version 3.1.1.RELEASE‑tuxcare.1 ensures those risks are patched. Apply the update as soon as possible to keep your applications safe.
What to do
- Update springframework org.springframework:spring-aop to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-asm to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-aspects to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-beans to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-context to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-context-support to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-core to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-expression to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-instrument to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-instrument-tomcat to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-jdbc to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-jms to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-orm to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-oxm to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-parent to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-struts to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-test to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-tx to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-web to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-webmvc to version 3.1.1.RELEASE-tuxcare.1.
- Update springframework org.springframework:spring-webmvc-portlet to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-aop to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-aspects to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-beans to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-context to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-context-support to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-core to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-expression to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-jdbc to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-jms to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-orm to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-oxm to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-struts to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-tx to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-web to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-webmvc to version 3.1.1.RELEASE-tuxcare.1.
- Update org.springframework:spring-webmvc-portlet to version 3.1.1.RELEASE-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | springframework | org.springframework:spring-aop |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-asm |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-aspects |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-beans |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-context |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-context-support |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-core |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-expression |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-instrument |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-instrument-tomcat |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-jdbc |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-jms |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-orm |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-oxm |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-parent |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-struts |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-test |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-tx |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-web |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-webmvc |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework:spring-webmvc-portlet |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-aop |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-aspects |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-beans |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-context |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-context-support |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-core |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-expression |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-jdbc |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-jms |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-orm |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-oxm |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-struts |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-tx |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-web |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-webmvc |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
| TuxCare:Maven | – | org.springframework:spring-webmvc-portlet |
>= 3.1.1.RELEASE, < 3.1.1.RELEASE-tuxcare.1 Fix: upgrade to 3.1.1.RELEASE-tuxcare.1
|
Original advisory text
TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 7 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1.
Timeline
Published4 Aug 2026
Updated2 Nov 2026
First seen15 Oct 2026
Sources
CLSA-2025-1760313986 · OSV
Track software like this
Free during beta