3 ms·
I wasn't talkin about a 3rd party library, Java is your runtime platform it has security fixes roll out. If you are an enterprise company that runs 3 year old
by TheGuyWhoCodes 5y ago
I wasn't talkin about a 3rd party library, Java is your runtime platform it has security fixes roll out.
If you are an enterprise company that runs 3 year old java version then
1) Your CSO and CIO should all be fired
2) Your security team should be replaced
3) Your ISO 27001 and SOC2 certification among others should be revoked
- raggi 5y agoGlass houses: https://snyk.io/vuln/npm:lodash@4.17.15 https://snyk.io/vuln/npm:lodash@4.17.15 / http://ariagno.com/spotify/ http://ariagno.com/spotify/
- madeofpalk 5y agoUntil two months ago the LTS release of Java - Java 11 - was 2 years old.
- TheGuyWhoCodes 5y agoNot sure what you are talking about. Java 11 was released on 2018-09-25 Java 11.0.2 that contained the "fix" was released on 2019-01-15 Java 11.0.13 (latest) was released on 2021-10-19 Also Java 8u192 was released on 2018-10-16
- alanfranz 5y agoI think you and parent(s) kept exchanging messages which conflated major and minor Java versions. Java 11 as a major is not old, it’s probably the best GA version right now, 17 is at a very early adoption stage. Openjdk 11.0.0 would be too old, though.
- yjftsjthsd-h 5y agoIf it's an enterprise running a 3y old JVM, what makes you think they have a CSO, CIO, or security team?