Java Ecosystem Digest #15

1. Apache Beam sdks/v2.43.0-RC2, 2.43.0-RC2
2. Apache Doris 1.2.0-rc01, 1.1.4-rc01
3. Gradle 7.6.0-RC2, 7.6.0-RC3
4. jdk20 build 23
5. JReleaser 1.3.1
6. PostgreSQL REL_10_23, 11.18, 12.13, 13.9, 14.6, 15.1
7. Quarkus 2.13.4.Final
8. Spring Batch 5.0.0-RC2
9. Spring Boot 3.0.0-RC2
10. Spring Framework 6.0.0-RC4
11. Wildfly 27.0.0.Final

Новый JEP435 Asynchronous Stack Trace VM API получил статус кандидата.

VMware исправили три уязвимости CVE-2022-31691, CVE-2022-31692, CVE-2022-31690. Две из них связаны с Spring Security, третья затрагивает проект Spring Tools.

1. JVM Logging [Billy Korando]
2. Creating Terabyte Sized Queues with Low-Latency [Per Minborg]
3. Spring Data JPA entity locking [Vlad Mihalcea]
4. Reviewing CVE-2022-42889: Arbitrary Code Execution Vulnerability in Apache Commons Text (Text4Shell) [Brian Vermeer]
5. Moving Security into the JVM [Erik Costlow]
6. Java Performance: Ahead-Of-Time versus Just-In-Time [Frank Delporte]
7. What is CORS? [Jakub Pomykała]