Oracle
Latest Oracle news, announcements & analysis
Data
New Hibernate Tool Writes Your Java Code for You
Hibernate, a popular Java tool, now includes a built-in feature to automatically generate code from a database schema. This saves developers from manually writing tedious boilerplate code, especially when working with large or older database systems.
Taranpreet Singh ·
Infra
Key Java Frameworks Get Major Summer Updates
The Java ecosystem saw a wave of updates, including progress on Jakarta EE 12 and new releases for GraalVM, Gradle, and Micrometer. These changes bring stability, new features, and performance improvements for developers.
Ashish Kale ·
Security
Secure JavaScript projects with one command
DepsGuard is a new open-source tool that simplifies securing JavaScript projects. It applies recommended security settings, like package cooldowns and disabling install scripts, across multiple package managers (npm, pnpm, yarn, bun, uv) with a single command, addressing common supply chain vulnerabilities.
Neeraj Dhiman ·
Tech
Oracle's Ellison on Constant Surveillance
Oracle co-founder Larry Ellison made a striking comment about the societal impact of constant surveillance. He suggested widespread recording would compel citizens to be on their 'best behavior,' raising questions about privacy, freedom, and a monitored society.
Navdeep Kaur Mahal ·
Data
Hibernate 7.4 Simplifies Data Queries
Hibernate 7.4 is now available, introducing significant quality-of-life improvements for Java developers. The update simplifies common but complex tasks, such as paginating queries with joined collections and accessing historical data for auditing. This release aims to streamline development and reduce boilerplate code for many applications.
Taranpreet Singh ·
Security
Ubuntu Fixes Critical MySQL Vulnerabilities
Ubuntu has released a security update for MySQL on its 20.04 LTS version, addressing multiple vulnerabilities. This update provides necessary fixes previously available for newer Ubuntu versions. Users are advised to apply the patch to protect their database systems from potential security risks and ensure stability.
Neeraj Dhiman ·
Infra
New Spring Boot Helps Block a Common Web Attack
The latest Spring Boot 4.1 release introduces built-in protection against server-side request forgery (SSRF) attacks. The update also simplifies modern API development with gRPC auto-configuration and adds support for Kotlin 2.3.
Ashish Kale ·
Tech
Java JDK 27 Prepares Major Updates
Java's next major version, JDK 27, is taking shape with key features moving closer to release. These include the new Vector API for performance, memory-saving Compact Object Headers, and making the G1 Garbage Collector the new default. The release schedule has also been finalized.
Taranpreet Singh ·
AI
Oracle Sets Conflicting Rules for AI-Generated Code
Oracle has set opposing policies for its open-source projects. OpenJDK now bans AI-generated code contributions, while GraalVM allows them, creating confusion for developers working under the same contributor agreement.
Neeraj Dhiman ·
Security
Oracle WebLogic Flaw Under Active Attack
CISA has added a high-severity Oracle WebLogic Server vulnerability, CVE-2024-21182, to its Known Exploited Vulnerabilities catalog. The flaw allows unauthenticated attackers with network access to take control of affected servers. Evidence confirms that this vulnerability is being actively exploited in the wild, requiring immediate attention.
Neeraj Dhiman ·
Security
Old Oracle Flaw Now Actively Exploited
CISA has issued an urgent directive for U.S. federal agencies to patch a two-year-old, high-severity vulnerability in Oracle WebLogic Server. The flaw is now being actively exploited in attacks, making it a critical threat for organizations still running unpatched versions of the enterprise software.
Neeraj Dhiman ·
Security
Oracle Rushes to Patch Flaw Used in Data Thefts
Oracle has patched a critical zero-day flaw in its PeopleSoft software that was actively used by hackers for data theft. The vulnerability allowed attackers to run code remotely without needing a password.
Neeraj Dhiman ·
Security
Critical Flaw in Apache Java Library
A critical remote code execution (RCE) vulnerability has been found in Apache Commons BeanUtils, a popular Java library. The flaw allows attackers to access a specific property in Java enum objects, potentially letting them run arbitrary code on affected systems, requiring immediate attention.
Neeraj Dhiman ·
Security
A Tiny JavaScript Library Puts Major Apps at Risk
A critical flaw in `protobuf.js`, a JavaScript library with 50 million weekly downloads, could allow attackers to run code remotely. The vulnerability affects countless apps that use it as an indirect dependency in major cloud ecosystems.
Neeraj Dhiman ·
Security
Ubuntu Releases Critical MySQL Patches
Ubuntu has released critical security updates for MySQL to address multiple vulnerabilities. The patches update MySQL to version 8.0.46 on Ubuntu 22.04 and 24.04 LTS, and to 8.4.9 on newer versions. The updates also include bug fixes, new features, and potentially incompatible changes.
Neeraj Dhiman ·
Security
Oracle Fixes 35 Major Security Flaws
Oracle has launched a new monthly security patch cycle, releasing fixes for 35 vulnerabilities. The update includes 11 flaws rated 'critical' and addresses issues in widely used products. Some of the patched vulnerabilities already have publicly available exploit code, increasing the urgency for teams to update.
Neeraj Dhiman ·
Infra
Prepare for a Major Java Upgrade Crunch
Four major long-term support (LTS) versions of Java will all reach their end-of-support dates within a tight three-year window. This sets the stage for a future upgrade bottleneck for companies needing to maintain security and support.
Ashish Kale ·
Tech
Java's Future Is Taking Shape This Week
Java is moving forward with JDK 27 entering its final development phase while planning for JDK 28 begins. Key tools like Kotlin, Micronaut, and Open Liberty also received important updates, keeping the ecosystem modern and stable.
Taranpreet Singh ·
Tech
Ableton opens Live to JavaScript developers
Ableton has released a new Extensions SDK, allowing developers to build custom features for its Live digital audio workstation using JavaScript. This new tool provides deeper integration than the existing Max for Live, enabling extensions to interact with almost any part of the software's user interface.
Navdeep Kaur Mahal ·
Tech
Java Ecosystem Sees Key Updates
The Java ecosystem received several key updates. Developments include lifecycle changes for two JDK 27 proposals and point releases for major frameworks like Quarkus and Hibernate. Spring AI reached its eighth milestone, and a new JVM-native WebAssembly runtime called Endive was introduced, expanding Java's capabilities.
Navdeep Kaur Mahal ·
Data
Optimizing Java For Data Engineering
Java Champion Gunnar Morling shares insights on building high-performance Java applications for data engineering. He discusses experiments with durable execution engines and the development of Apache Hardwood, a new, minimal-dependency Java parser for the Apache Parquet file format, offering lessons for developers and engineering leaders.
Taranpreet Singh ·
Tech
New Java Library Builds Terminal UIs
A new Java library called TamboUI aims to improve building terminal user interfaces (TUIs). Inspired by Ratatui, it offers tools from low-level drawing to high-level components. Major projects like Maven and Spring have already adopted the library, signaling its potential significance for Java developers.
Navdeep Kaur Mahal ·
Data
Meta Rebuilds Petabyte Data Platform
Meta's engineering team successfully migrated its petabyte-scale data ingestion platform, which processes social graph data from MySQL. The team used advanced techniques like reverse shadowing and continuous checksum monitoring to ensure a seamless transition with zero downtime, improving both reliability and operational efficiency.
Taranpreet Singh ·
AI
Dev Injects Attack on AI Coders
A developer of the open-source Java testing library `jqwik` intentionally added hidden instructions to sabotage projects built by AI coding agents. This real-world prompt injection attack highlights a new vulnerability in the software supply chain, affecting developers who rely on AI for coding assistance.
Neeraj Dhiman ·
Tech
Major Java Frameworks Get Updates
The Java ecosystem has seen several major updates, including the general availability of WildFly 40, Micronaut 5.0, and Apache Fory 1.0. Spring AI also reached its seventh milestone for version 2.0, alongside updates for Open Liberty, Apache Kafka, and the Maven Embedded GlassFish Plugin.
Navdeep Kaur Mahal ·