Improve diagnostics in SpEL for large array creation #28257

Activity

1. jhoeller

   added

   in: coreIssues in core modules (aop, beans, core, context, expression)Issues in core modules (aop, beans, core, context, expression)

   type: enhancementA general enhancementA general enhancement

   on Mar 31, 2022
2. jhoeller

   added this to the 5.2.20 milestone on Mar 31, 2022
3. jhoeller

   assigned

   bclozel

   on Mar 31, 2022
4. bclozel

   added a commit that references this issue on Mar 31, 2022

   Improve diagnostics in SpEL for large array creation

   ...

   This issue will close once commit 90cfde9 is merged into the 'main' branch.

   90cfde9
5. jhoeller

   closed this as completedon Mar 31, 2022
6. jhoeller

   added

   type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

   on Mar 31, 2022
7. jgallimore

   added a commit that references this issue on Apr 1, 2022

   Improve diagnostics in SpEL for large array creation

   ...

   This issue will close once commit 34f9fb5 is merged into the 'main' branch.

   34f9fb5
8. Maarten-Damen commented on Apr 5, 2022

   

   Maarten-Damen

   on Apr 5, 2022

   More actions

   Hi @jhoeller,

   Am I correctly assuming that this is the fix for CVE-2022-22950? And if so, would it be possible to update the documentation that the fix is also applied to 5.2.20? Since the CVE reports now only mention 5.3.17 as fix version for this CVE.

   Some of the documentation mentions:

   • https://tanzu.vmware.com/security/cve-2022-22950
   • https://spring.io/blog/2022/03/28/cve-report-published-for-spring-framework
   • https://nvd.nist.gov/vuln/detail/CVE-2022-22950
9. sbrannen commented on Apr 5, 2022

   

   sbrannen

   on Apr 5, 2022

   Member

   More actions

   @Maarten-Damen, we have updated the published documentation.

   👍React with 👍1Reacted by Maarten Damen
10. RangerRick

    added 7 commits that reference this issue on Jul 26, 2022

    Improve diagnostics in SpEL for large array creation

    ...

    This issue will close once commit 37c762c is merged into the 'main' branch.

    37c762c

    Improve diagnostics in SpEL for large array creation

    ...

    This issue will close once commit 619eefa is merged into the 'main' branch.

    619eefa

    Improve diagnostics in SpEL for large array creation

    ...

    This issue will close once commit c9eb54d is merged into the 'main' branch.

    c9eb54d

    Improve diagnostics in SpEL for large array creation

    ...

    This issue will close once commit fa6e16b is merged into the 'main' branch.

    fa6e16b

    Improve diagnostics in SpEL for large array creation

    ...

    This issue will close once commit 740d7c1 is merged into the 'main' branch.

    740d7c1

    Improve diagnostics in SpEL for large array creation

    ...

    This issue will close once commit 1ec5733 is merged into the 'main' branch.

    1ec5733
11. kkolman

    added a commit that references this issue on Nov 2, 2022

    CVE-2022-22950 - Improve diagnostics in SpEL for large array creation

    ...

    This issue will close once commit 12c3f41 is merged into the 'main' branch.

    12c3f41