Marketing Communique

Greetings!

BASIS International Ltd. releases version 25.10 of BBj®, the Barista® Application Framework, and AddonSoftware®. Included in this release is a production ready preview of a BBj 26 feature; a new BASIS webUI client.

See the highlights of the new webUI client and other security updates described below, and for additional details, refer to the Readme, Relnotes, and Fixes.

All versions of BBj prior to 23.07 that integrate with Jetty are susceptible to a security vulnerability relating to file uploads. In BBj 25.10 we have further hardened the default settings to prevent unauthenticated file upload. To fully address this vulnerability, ensure you upgrade to BBj 25.10 or higher to receive the latest security fixes.

Additionally, when upgrading from a version prior to BBj 25.00, remember that any application referencing the javax.servlet package in its USE statement will need to switch the reference to jakarta.servlet. That’s to utilize the Jakarta EE10 servlet architecture, and allows everyone to upgrade code libraries that were stuck on EE8 architecture.

Rome wasn’t built in a day, and your CUI & GUI applications won’t become responsive web apps overnight. However, with the introduction of the webUI client, we’ve put you on the fast track for development of a new responsive design UI for your app. The new webUI client allows you to immediately get your GUI or CUI app online in a browser, no desktop JRE or terminal emulator, or code changes required. Visit our WebUI overview to learn more about taking your app to the web, and contact your BASIS account representative for pricing of this new feature.

To use the default SSL certificate for BBjServices encrypted connections with Java 17.0.17+ or 21.0.9+, the client and server must both use BBj 25.10+ due to changes in how Java handles SSL certificates.