Here are release notes for Spring Cloud Gateway for VMware Tanzu.
v2.0.8
Release Date: Apr 4, 2024
Enhancements included in this release
Resolved security vulnerabilities:
- CVE-2023-52428 (nimbus-jose-jwt)
- CVE-2024-22257 (spring-security-core)
v2.0.7
Release Date: Feb 29, 2024
Enhancements included in this release
Resolved security vulnerabilities:
- CVE-2023-51074 (json-path)
- CVE-2023-33201 (bcprov-jdk18on)
- CVE-2024-26308 (commons-compress)
v2.0.6
Release Date: Feb 2, 2024
Enhancements included in this release
Resolved security vulnerabilities:
- CVE-2024-20918 (BellSoft Liberica JRE)
- CVE-2024-20932 (BellSoft Liberica JRE)
- CVE-2024-20952 (BellSoft Liberica JRE)
v2.0.5
Release Date: Dec 19, 2023
Enhancements included in this release
Resolved security vulnerabilities:
- CVE-2023-6378 (logback-core)
- CVE-2023-34054 (reactor-netty-http)
- CVE-2023-34062 (reactor-netty-http)
v2.0.4
Release Date: Nov 24, 2023
Enhancements included in this release
- Resolved security vulnerabilities: CVE-2023-29400 (golang) and GHSA-xpw8-rcwv-8f8p (io.netty)
v2.0.3
Release Date: Nov 1, 2023
Enhancements included in this release
- Resolved security vulnerability: PRISMA-2023-0067
- Upgraded OSS dependencies: Spring Boot v3.0.11
v2.0.2
Release Date: Sep 21, 2023
Enhancements included in this release
- Resolved the following CVEs: CVE-2023-2976 (com.google.guava:guava)
v2.0.1
Release Date: Aug 9, 2023
Enhancements included in this release
- Resolved the following CVEs: CVE-2023-20873, CVE-2023-20883, CVE-2023-38286, CVE-2023-34034 and CVE-2023-3635
- Upgraded OSS dependencies: Spring Boot v3.0.9, Spring Cloud v2022.0.3
Known Issues
If configuring the product using the Ops Manager API, please note that this version removes two unused configuration properties. If you have been setting these properties for previous versions of Spring Cloud Gateway for VMware Tanzu, please remove them from your configuration file before applying it to version 2.0.1 and above:
.properties.allow_paid_service_plans
.properties.apply_open_security_group
v2.0.0
Release Date: May 17, 2023
Enhancements included in this release
- Added the following filters: AddRequestHeadersIfNotPresent, AllowedRequestCookieCount, AllowedRequestHeadersCount, AllowedRequestQueryParamsCount, Cors, LocalResponseCache, RemoveJsonAttributesResponseBody, RewriteJsonAttributesResponseBody
- Added high availability optional configuration to use Redis for session management and rate limiting
- Support for configuring multiple buildpacks used to stage API Gateway instances
- Compatibility with VMware Tanzu Application Service 4.0
- Upgraded OSS dependencies: Spring Boot 3.0.5, Spring Cloud 2022.0.2, Spring Cloud Gateway 4.0.5, Spring Cloud App Broker 2.0.0
