These two versions also address the CVE-2022-22968 vulnerability as described above.
Spring Framework 5.3.19 and 5.2.21 have been released that ship with 12 bug fixes and improvements and five bug fixes and improvements, respectively. Spring Boot versions 2.6.7 and 2.5.13, scheduled to be released on April 21, 2022, will also contain this fix, but developers are encouraged to manually upgrade the Spring Framework dependency in their Spring Boot applications. VMware has announced CVE-2022-22968, Spring Framework Data Binding Rules Vulnerability, as a follow up to CVE-2022-22965, Spring Framework RCE via Data Binding on JDK 9+, after it was discovered that the disallowedFields configuration property on the WebDataBinder class was not protected. For the remaining specifications, currently waiting for compatibility certification requests and in various stages of TCK tests, the release reviews should be completed within the next three weeks to ensure that Jakarta EE 10 is delivered by the end of May 2022. The release review for Jakarta Context and Dependency Injection 4.0 is still in progress and expected to be completed by April 20, 2022. This means about half of the specifications defined to be included in the Platform Profile are ready for Jakarta EE 10: On the road to Jakarta EE 10, Ivar Grimstad, Jakarta EE developer advocate at the Eclipse Foundation, announced in his Hashtag Jakarta EE weekly blog that release reviews for four additional specifications have concluded this past week. More details may be found in the release notes.įor JDK 19, developers are encouraged to report bugs via the Java Bug Database. JDK 19īuild 18 of the JDK 19 early-access builds was made available this past week, featuring updates from Build 17 that include fixes to various issues. JEP 426 proposes to enhance the Vector API to load and store vectors to and from a MemorySegment as defined by JEP 424, Foreign Function & Memory API (Preview). This JEP, under the auspices of Project Panama, incorporates enhancements in response to feedback from the previous three rounds of incubation: JEP 417, Vector API (Third Incubator) (delivered in JDK 18), JEP 414, Vector API (Second Incubator) (delivered in JDK 17), and JEP 338, Vector API (Incubator), delivered as an incubator module in JDK 16.
JEP 426, Vector API (Fourth Incubator), was promoted from its JEP Draft 8280173 to Candidate status.
This week's Java roundup for April 11th, 2022, features news from OpenJDK, JEP 426, JDK 19, Jakarta EE 10 updates, Spring Framework point releases and CVE-2022-22968, Quarkus 2.8.0, Open Liberty 22.0.0.4 and 22.0.0.5-beta, Micronaut 3.4.2, WildFly 26.1, Eclipse GlassFish 7.0-M4, Piranha 22.4.0, Apache Camel Quarkus 2.8.0, IntelliJ IDEA 2022.1, Ktor 2.0, and the Devnexus 2022 Conference.
0 kommentar(er)
