반응형 English/Java3 [Java] Spring Patch Thursday: One Day a Month, Next Nov 19 Spring Patch Thursday is the one day a month, the Thursday after the third Monday, when the Spring team ships regular patch releases for every Spring project along with that month's security fixes. The team announced it on September 21, 2026. The first one was October 22, and the next is November 19. The reason is a sharp rise in security reports as AI makes vulnerabilities easier to find. "Patc.. 2026. 10. 26. [Java] JDK 27 New Features: Hybrid TLS by Default, Not LTS JDK 27 (Java 27), released September 15, 2026, is a Java feature release, not a long-term support (LTS) release. Of its nine JDK Enhancement Proposals (JEPs), three changes reach the most setups: G1 (Garbage-First) is now the default garbage collector (GC) even with one CPU or under 1792 MB of memory, compact object headers are on, and TLS 1.3 now prefers the post-quantum hybrid key exchange X25.. 2026. 10. 26. [Java] CVE-2026-91403: October's Java Update Isn't Enough CVE-2026-91403 is an Oracle security alert (CVSS 9.1) for Java SE and GraalVM, published October 21, 2026. The OpenJDK advisory and Oracle's fix show the cause isn't a bug in Java's code: Java still trusted eight eMudhra intermediate CA certificates with compromised private keys. On October 24, a follow-up alert, CVE-2026-114820, added the .0.2 builds from October 21 to the affected list. Instal.. 2026. 10. 22. 이전 1 다음 728x90 반응형
