Oracle Patches Java AWT/JavaFX Flaw CVE-2026-21932; Xerox FreeFlow Patch Path Confirmed

·2 views

Oracle disclosed CVE-2026-21932 in its January 2026 Critical Patch Update, describing an integrity issue in the AWT and JavaFX components of Java SE and GraalVM products. The CVSS 3.1 score is 7.4, with network attack vector, low complexity, no privileges required, and required user interaction. Xerox bulletins XRX26-006 and XRX26-007 list the CVE as remediated by shipping updated OpenJDK 8u482-b08 in FreeFlow v7 and v2 packages, while the v9 bulletin does not reference it. Public sources do not establish a specific FreeFlow exploit path, and Oracle's guidance applies mainly to sandboxed Java applets and Web Start applications. Administrators are advised to restrict network access until patches are applied and to verify the installed Java version afterward.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

OnePassApps' Ask Sam panel opens apps by command and works without an account

A developer working on OnePassApps examined the "Ask Sam" button found on every page of the app suite. The panel appears beside the page and offers a text composer, with chips that pre-fill a command rather than submitting it. Typing "Open" followed by an app name, such as "Open Image Studio", navigates straight to that app, and this works while signed out. Free-form requests receive a fixed guidance message explaining the command syntax instead of an AI-generated answer. Network logging during an app command showed only the app's own configuration fetch, with no chat request sent.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SoundHound to Report Q3 Results November 5, With Options Pricing About a 12.5% Move

SoundHound AI (SOUN) is scheduled to report its third-quarter results on November 5, with its investor call at 5 p.m. Eastern. Analyst consensus as of October 29 called for revenue of about $62.2 million and a per-share loss of $0.05. The company's 2026 revenue guidance of $230 million to $260 million was set in August, but its September 4 acquisition of LivePerson, which booked $52.5 million of revenue in the second quarter, is not reflected in that consensus. Options pricing implies a move of roughly 12.5% around the report, and short interest stood at 170.8 million shares as of October 15.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Fine-Grained Password Policies: How to Set Them Up in Active Directory

This guide explains how to create Fine-Grained Password Policies (FGPP) in Active Directory, which allow different password and account lockout rules for specific users or groups within one domain. FGPPs can only be applied to user objects and global security groups, and the domain functional level must be Windows Server 2012 or later. Administrators need Domain Admins membership and either the Active Directory Administrative Center or the Active Directory PowerShell module. The article walks through creating a policy in the Password Settings Container, noting that lower precedence values take higher priority. Finally, it shows how to verify which policy applies to a user using the Get-ADUserResultantPasswordPolicy PowerShell command.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Hyperliquid Python bot's $25 order cap blocked every $25 test order

A developer tested an AI-generated Python starter for the Hyperliquid trading API, which was meant to place small testnet orders capped at $25. The live run on October 25 showed that reads, price rounding and the testnet-only guard worked as intended. However, the cap blocked all 892 test orders of $25 across testnet and mainnet. The cause was that size rounding pushed each order's notional value slightly above $25, and the check compared that figure directly to the cap. The rebuilt version separates the requested amount from the order's own notional value, allowing for one size step of rounding. The article notes this was one of four problems found, and the author says the prompt has been revised accordingly.

0 comments Read more at DEV Community