Rob Winch

Rob Winch

Rob Winch is employed by VMware as the project lead of security related projects within Spring. He is also a committer on the core Spring Framework and co-author for Spring Security LiveLessons and a Spring Security book. In the past he has worked in the health care industry, bioinformatics research, high performance computing, and as a web consultant. When he is not sitting in front of a computer he enjoys cycling with his friends.

Recent Blog posts by Rob Winch

CVE-2016-9879: Spring Security 3.2.10, 4.1.4, 4.2.1 Released

Releases | December 22, 2016 | ...
On behalf of the community, I’m pleased to announce the release of Spring Security 3.2.10, 4.1.4, and 4.2.1 which fix CVE-2016-9879. Users are encouraged to update immediately. It is important to note that Spring Framework 3.2.x has reached EOL. As with Spring Framework, we expect all users to upgrade to 4.2.1+ for further support. Detailed instructions (including samples) on migrating both XML and Java Config based projects can be found in the reference appendix Project Site | Reference | Guides | Help

Spring LDAP 2.2.1 & 2.3 RC1 Released

Releases | December 22, 2016 | ...
On behalf of the community, I’m pleased to announce the release of Spring LDAP 2.2.1 and 2.3 RC1. A special thanks to Mark Paluch for getting spring-data-ldap aligned on the Spring Data side! Spring LDAP 2.3 RC1 This release brings in a new era for Spring Data compatibility. Integration for Spring LDAP and Spring Data has been moved to spring-data-ldap so that it can partake in the Spring Data release train and ensure compatibility with the latest and greatest Spring Data code base. For additional details refer to the changelog Spring LDAP 2.2.1 This release contains some minor bug fixes along…

Spring Session 1.3.0 Released

Releases | December 16, 2016 | ...
On behalf of the community, I’m pleased to announce the release of Spring Session 1.3.0.RELEASE. This release evolved through 1.3.0.M1, 1.3.0.M2, 1.3.0.RC1, and 1.3.0.RELEASE What’s New in Spring Session 1.3.0.RELEASE You can find highlights of what’s new in the What’s New in Spring Session 1.3.0.RELEASE section of the reference. For details refer to the changelog links above. Contributions Without the community we couldn’t be the successful project we are today. I’d like to thank everyone that created issues & provided feedback. Feedback Please If you have feedback on this release, I…

Spring Session 1.3.0 RC1 Released

Releases | November 23, 2016 | ...
On behalf of the community, I’m pleased to announce the release of Spring Session 1.3.0.RC1. This release release closes lots of community submitted Pull Requests. For a complete list of changes see the changelog. What’s New in Spring Session 1.3.0 RC1 Highlights include: First class Spring Security’s RememberMe Support Updated guides to use Lettuce OrientDB Support Configuration Improvements Performance Optimizations Bug Fixes Contributions Without the community we couldn’t be the successful project we are today. I’d like to thank everyone that created issues & provided feedback. Feedback…

Spring Security 4.2.0 Released

Releases | November 10, 2016 | ...
On behalf of the community, I am pleased to announce the release of Spring Security 4.2.0.RELEASE. What’s New in Spring Security 4.2 You can find highlights of what’s new in the What’s New in Spring Security 4.2 section of the reference. This release closes out 80+ issues which can be found in the 4.2 M1, 4.2 RC1, and 4.2 RELEASE changelogs. Contributions Without the community we couldn’t be the successful project we are today. I’d like to thank everyone that created issues & provided feedback. An easy way to contribute is to help spread the word about the release. Feedback Please If you have…

Spring Security 4.2 RC1

Releases | October 27, 2016 | ...
On behalf of the community, I am pleased to announce the release of Spring Security 4.2.0.RC1. What’s New in Spring Security 4.2 You can find highlights of what’s new in the What’s New in Spring Security 4.2 section of the reference. This release closes out 70+ issues which can be found in the 4.2 M1 and 4.2 RC1 changelogs. Contributions Without the community we couldn’t be the successful project we are today. I’d like to thank everyone that created issues & provided feedback. Feedback Please If you have feedback on this release, I encourage you to reach out via StackOverflow, GitHub Issues…

Spring LDAP 2.2.0 Released

Releases | October 25, 2016 | ...
On behalf of the community, I am pleased to announce the release of Spring LDAP 2.2.0.RELEASE. What’s New in Spring LDAP 2.2 You can find highlights of what’s new in the What’s New in Spring LDAP 2.2 section of the reference. Contributions Without the community we couldn’t be the successful project we are today. I’d like to thank everyone that created issues & provided feedback. Feedback Please If you have feedback on this release, I encourage you to reach out via StackOverflow, GitHub Issues, or via the comments section. You can also ping me @rob_winch or Joe @joe_grandja on Twitter. Of…

Spring LDAP 2.2 RC1

Releases | October 04, 2016 | ...
On behalf of the community, I am pleased to announce the release of Spring LDAP 2.2.0.RC1. What’s New in Spring LDAP 2.2 You can find highlights of what’s new in the What’s New in Spring LDAP 2.2 section of the reference. Contributions Without the community we couldn’t be the successful project we are today. I’d like to thank everyone that created issues & provided feedback. Feedback Please If you have feedback on this release, I encourage you to reach out via StackOverflow, GitHub Issues, or via the comments section. You can also ping me @rob_winch or Joe @joe_grandja on Twitter. Of course…

Spring Security 4.2 M1

Releases | September 23, 2016 | ...
On behalf of the community, I am pleased to announce the release of Spring Security 4.2.0.M1. What’s New in Spring Security 4.2 You can find highlights of what’s new in the What’s New in Spring Security 4.2 section of the reference. This release closes out 50+ issues which can be found in the changelog. Contributions Without the community we couldn’t be the successful project we are today. I’d like to thank everyone that created issues & provided feedback. Feedback Please If you have feedback on this release, I encourage you to reach out via StackOverflow, GitHub Issues, or via the comments…

Spring Session 1.3.0 M2 Released

Releases | September 14, 2016 | ...
On behalf of the community, I’m pleased to announce the release of Spring Session 1.3.0.M2. This release release closes lots of community submitted Pull Requests. For a complete list of changes see the changelog. Note Spring Session 1.3.0.M1 release had some problems, so we followed up with an immediate release of Spring Session 1.3.0.M2 What’s New in Spring Session 1.3.0 M2 Highlights include: First Class Support for Hazelcast First class Spring Security’s concurrent session management Redis Sample with GenericJackson2JsonRedisSerializer spring.session.cleanup.cron.expression can be used to…

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all