Related reading
Java 27 Delivers Post-Quantum Cryptography, Future Language Innovation, Helidon 27, JavaFX 27
Java 27 ships with nine JEPs—G1 as the default GC, post‑quantum TLS 1.3, lazy constants, primitive‑type patterns, structured concurrency, compact object headers, JFR redaction, Vector API incubator, and PEM encoding preview—plus the first Java Verified Portfolio releases (Helidon 27, JavaFX 27, Jipher 20). The release is a security‑focused, non‑LTS update that paves the way for Project Valhalla f…
InfoQinfoq.com5 minJava News Roundup: JDK 27, Open J Proxy, A2A Jakarta, Azul Payara, BoxLang, Netflix ja
InfoQ’s Java roundup lists the GA release of JDK 27, early‑access build 16 of JDK 28, BellSoft’s Liberica JDK 27, Jakarta EE 12 updates, Open J Proxy 1.0 (with JDBC cache and HikariCP leak detection), A2A Jakarta 1.0, Azul Payara 7.4.0 (MicroProfile 7.1, OpenTelemetry migration), JHipster 9.4 (Playwright, esbuild), Ktor 3.6 (OIDC auto‑discovery), BoxLang 1.17 (module service, syntax checker) and…
InfoQinfoq.com5 minReproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
Hacktron reported an RCE in libheif, an AVIF decoder used by Next.js image optimization. Vercel and Hacktron reproduced the issue, then coordinated with upstream maintainers (sharp, libvips, libheif) to deploy platform-wide mitigations and release fixes across the ecosystem.
Vercelvercel.com4 min
