Practical notes on Java, Spring, testing, and software engineering, with working examples and source references.
All articles →Separate the GitLab regular-expression RCE’s first fixed releases from verified deployment. Use an offline version comparator and follow required upgrade stops and migrations.
Distinguish Oracle, Temurin and Ubuntu eMudhra distrust guidance. Inspect JSSE trust-store selection and certificate fingerprints without treating version labels or aliases as a verdict.
Check CVE-2026-111497 fixes, Brotli input paths and misleading version labels. Collect runtime evidence and distinguish installation from adoption by every worker and replica.
Distinguish PHP2Shell upstream fixes from vendor backports and verify the PHP workers serving requests. Track the session follow-up and Windows Brotli rebuild separately.