Update to vulnerability description - CVSS 4.0 A vulnerability description includes several fields, like the title and description. However, one is causing difficulties for people writing CVE (Common Vulnerability Enumeration) entries: the CVSS (Common Vulnerability Scoring System) vector. CVSS is an important field because it answers a fundamental question about the vulnerability: "How serious is it?" A new version of CVSS, version 4.0, has recently been implemented, and it is a great occasion to review how we calculate the CVSS score. One important thing to know about CVSS is that it descri ..read more

Hashtag Jakarta EE #238 Welcome to issue number two hundred and thirty-eight of Hashtag Jakarta EE! I have just arrived back home from JConf Dominica 2024, and have a couple of hours to pack my bags before heading out again for JCrete 2024. Busy times for a developer advocate, but so incredibly great to be able to connect with the Java communities all over the world. From one island to the other…From @jconfdominicana to @JCreteUnconf STI JFK CPH CPH CHQ#JakartaEE #EclipseFoundation #Community — Ivar Grimstad (@ivar_grimstad) July 20, 2024 (I don’t know if it was pure luck, or if t ..read more

JConf Dominicana 2024 A Java conference in the Dominican Republic sounds too good to be true. Well, I can tell you that it is a thing, and it is awesome! JConf Dominicana, The Caribbean Java Technologies Conference is organized by Java Dominicano, the Dominican Java User Group. It is a one-day conference with a half day of workshops the day before. I hosted a 4-hour Jakarta EE workshop together with Eudris Cabrera. He provided Spanish translations of all the instructions for the participants and explained in Spanish where my English came short. We had a great time, and it looks like the parti ..read more

Hashtag Jakarta EE #237 Welcome to issue number two hundred and thirty-seven of Hashtag Jakarta EE! After a couple of weeks at home, I am going on the road again. First off is JConfDomincana, the Caribbean Java Technologies Conference organized by the Dominican Republic Java User Group, where I will host a workshop together with Eudris. The topic of the workshop is creating RESTful Web Services with Jakarta EE. As mentioned in last week’s Hashtag Jakarta EE, the refactoring of the Jakarta EE TCK is what we are waiting for to be able to release Jakarta EE 11. The TCK project has now set ..read more

Hashtag Jakarta EE #236 Welcome to issue number two hundred and thirty-six of Hashtag Jakarta EE! Last week I was speaking at Developer Week’24 in Nuremberg, Germany. That was my last conference of the European conference season before summer. This year, there will be a couple of conferences during the summer before the fall season start up. In a couple of weeks, I will host a workshop at JConfDominica 2024 before going directly to Greece for JCrete 2024. Jakarta EE 11 is almost ready. All the individual specifications are done, and the Jakarta EE Platform project is finalizing the Jaka ..read more

Developer Week ’24 Developer Week is a four-day conference that takes place in Nuremberg, Germany. As the name implies, it is a developer conference where Java is a track among the other track topics. I spoke at the conference for the first time in 2017, and it feels like the Java track has increased in size since then even if it is still a small part of the conference. Anyway, it is very useful to be present at these non-100%-Java conferences as well. As Brian pointed out, they are coping with the same problems and challenges as the Java community. Talking about Brian, here we are as we are ..read more

Eclipse Cloud DevTools Digest - May and June, 2024 Eclipse Foundation Introduces Theia IDE The Eclipse Foundation, one of the world’s largest open source foundations, has announced the release of Eclipse Theia IDE, marking a significant milestone in the evolution of Integrated Development Environments (IDEs). Built on the robust Eclipse Theia platform, a popular choice among tool providers since 2017, Theia IDE provides an exceptional user experience designed to meet the needs of today’s developers. This latest addition to the Eclipse Cloud DevTools ecosystem offers a modern, extensible c ..read more

Announcing the Release of the State of Open Source in the Global South Report At the Eclipse Foundation, we believe in empowering developers to harness the power of technology to drive positive change in the world. Today, we are excited to announce the release of the State of Open Source in the Global South report. Based on the results of in-depth interviews and a comprehensive survey, the report highlights the pivotal role of open source software in fostering innovation, economic growth, and societal development in low- and middle-income countries (LMICs). From 14 May to 28 May, we reac ..read more

Hashtag Jakarta EE #235 Welcome to issue number two hundred and thirty-five of Hashtag Jakarta EE! As I wrote last week, all the Jakarta EE 11 specifications are now finished and the remaining work to get Jakarta EE 11 released is to finalize the refactoring of the TCK and have at least one open-source compatible implementation passing it. Milestone 4 of the Jakarta EE 11 APIs are now available in Maven Central. Use these coordinates in your pom.xml to try out this version. <dependency> <groupId>jakarta.platform</groupId> <artifactId>jakarta.jakartaee-ap ..read more

Eclipse CycloneDDS Security Audit Has Been Completed Today, the Eclipse Foundation released the results of our security audit for Eclipse CycloneDDS. Findings from the audit have been addressed in the latest versioned source code of Eclipse CycloneDDS, available at https://github.com/eclipse-cyclonedds/cyclonedds . Eclipse CycloneDDS is an implementation of the Data Distribution Service (DDS) specification published by the OMG Standards Development Organization. The standard defined both the communication protocol and API for a publisher-subscriber model and is used in various fields inc ..read more