Geode Java Client Upgrade Compatibility

[Ashish Choudhary <aa...@gmail.com>]

Hi Team,

We plan to upgrade geode from 1.12.0 to 1.12.8 to fix the vulnerability
with Apache Shiro. The server version is 9.10.13(Gemfire), and as per the
documentation, it is compatible with geode 1.12.

https://gemfire.docs.pivotal.io/910/gemfire/release_notes.html

Can someone please confirm if there would be an issue in upgrading to a
minor version 1.12.8 here?

Thanks,
Ashish

Re: Geode Java Client Upgrade Compatibility

[Dan Smith <da...@vmware.com>]

Using Geode 1.12.8 with GemFire 9.10.13 should be fine.

In general, we suggest using a server version that is higher or equal than the client version. 9.10.13 is based on Geode 1.12.7, so technically to have matching versions it would be nice to update the server.

But in practice, the only time that really matters is if we have to change the client-server protocol in a patch version. That is pretty rare. It definitely hasn't changed in Geode 1.12.8. I think the only changes are the log4j version update and a server side bug fix. So there shouldn't be an issue upgrading the client.

-Dan


________________________________
From: Ashish Choudhary <aa...@gmail.com>
Sent: Wednesday, February 23, 2022 9:59 AM
To: user@geode.apache.org <us...@geode.apache.org>
Subject: Geode Java Client Upgrade Compatibility

Hi Team,

We plan to upgrade geode from 1.12.0 to 1.12.8 to fix the vulnerability with Apache Shiro. The server version is 9.10.13(Gemfire), and as per the documentation, it is compatible with geode 1.12.

https://gemfire.docs.pivotal.io/910/gemfire/release_notes.html<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgemfire.docs.pivotal.io%2F910%2Fgemfire%2Frelease_notes.html&data=04%7C01%7Cdasmith%40vmware.com%7C143ff92648cd4c6c3a2108d9f6f6501a%7Cb39138ca3cee4b4aa4d6cd83d9dd62f0%7C0%7C0%7C637812360041259691%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=wb1h6Cmv70uts2tX0N5MOPmicxek8Bv9oxnQTDEb5oo%3D&reserved=0>

Can someone please confirm if there would be an issue in upgrading to a minor version 1.12.8 here?

Thanks,
Ashish