Oracle이 CVSS 9.1점의 심각한 취약점 CVE-2026-91403을 처리하기 위해 긴급 보안 공지를 발표했습니다.
이 취약점은 다음에 영향을 미칩니다:
Java 88u511, 8u511-perf
Java 1111.0.33
Java 1717.0.21
Java 2121.0.13
Java 2525.0.5
Java 2727.0.1
GraalVM for JDK17.0.21, 21.0.13
GraalVM Enterprise21.3.20
등 버전
突发:Oracle 紧急发布安全公告,处理一个 CVSS 9.1 分的严重漏洞 CVE-2026-91403。
这个漏洞影响了
Java 88u511、8u511-perf
Java 1111.0.33
Java 1717.0.21
Java 2121.0.13
Java 2525.0.5
Java 2727.0.1
GraalVM for JDK17.0.21、21.0.13
GraalVM Enterprise21.3.20
等版本
如果你运行 Java 后端、Spring Boot、GraalVM 或包含 JRE 的 Docker 镜像,建议:
1. 使用 java -version 确认实际运行版本。
2. 检查每个容器和应用是否打包了独立的 Java Runtime。
3. 根据 Oracle 的紧急公告安装对应补丁,或应用官方证书阻止列表及吊销检查措施。
4. 升级后验证 HTTPS 连接仍然正常,并确认受影响证书不再被信任。
Code댄스 retweeted
Day 18/ Decisions API is GA, OpenResponses joined the Linux Foundation, we shipped some performance improvements and Uber is going all-in on codex & work. But yes… that’s a reset!
最近のスタメン plugin・Skill
- pstack
- Cursor Team Kit
- Thermos
- /grill-with-docs
- 検証レイヤー e2e /create-verification-skil・react-doctor・fallow
基本はpstackで、細かい仕様決め・用語決めが必要な設計は /grill-with-docsを先にやってからpstack
検証はe2eの /create-verification-skill と pstackの /create-formal-verification-skill で E2E と形式検証をして品質を担保
その後のレビューは Thermos でコード品質とバグ・セキュリティ・仕様の漏れをチェック
CIでreact-doctor・fallowなど追加の検証を実施する
더 나은 방법으로 에이전트를 사용하는 팁이네요!
We'll be spending a lot more time trying to understand the outputs of language models. A few thoughts, tips & tricks:
Writing. Something I've had success with: Ask your LLM to explain something in ASD-STE100, it's a controlled language specification originally developed for aerospace maintenance documentation. LLMs well-versed in this language and it comes with heavy constraints on clean writing style that I often find a lot more readable. Sometimes I've tried to soften it a bit e.g. ask for "80% of the way to ASD-STE100" because the spec is quite stringent. But even better:
Diagrams / images. Instead of writing, ask your LLM to create a diagram. These can be a lot easier to process, parse, and understand. But even better:
Web pages. Ask for output "in HTML" to get a beautiful, interactive webpage. LLMs are getting really good at frontend and can create beautiful experiences, animations, etc. But even better:
Explainer videos. The output format I am most bullish on is fully custom / bespoke explainer videos generated on any arbitrary topic. Experiment with things like "Create a 3b1b style video explainer on X. Use my ElevenLabs API key for audio narration". (you'd need an API key for the latter or you can ask your LLM to find you decent free alternatives that use your local compute). This is actually starting to work!
In summary:
- As LLMs get better, they will do more and more of the legwork autonomously, and a lot more of our work will rise up the abstractions into oversight and understanding.
- Luckily, LLMs can help here too because as intelligence and code are increasingly abundant, you can ask for large, custom, discardable software artifacts (e.g. web apps, video explainers) that would have never made sense to create before. Push the boundaries here and you'll be surprised.
오 아주 편한 어플이 나왔네요.
치는 대로 그냥 한영을 알아서 변환해주는 어플이군요.
이제 써보기 시작했는데 아이디어가 아주 좋습니다.
한/영 키 없이, 그냥 치세요.
Catchtype은 치는 동안 낱말마다 한글인지 영어인지 알아서 골라요. 영어 상태로 친 dkssud는 안녕이 되고, 한글 상태로 친 git push도 영어로 돌아와요.
Mac·Windows·Linux 무료 베타 · iPhone 키보드
catchtype.com
Code댄스 retweeted
오늘은 하늘공원 억새 보러 왔는데
날씨도 좋고 하늘도 진짜 예쁘네.
바람 불 때마다 억새가 살랑거리는 게 참 좋다.
서울에도 이런 풍경을 볼 수 있는 곳이 있다니.
가을 가기 전에 한 번쯤 와볼 만한 곳이다.


























