3 ms·
Java security update: 36 vulnerabilities, 34 remotely exploitable
- deleted 13y ago[deleted]
- mparlane 13y agoAnyone who uses gerrit?
- wglb 13y agoToo numerous to mention.
- wiserat 13y agoApplet sandbox related holes only affect applets, which most Java developers don't use. There are other vulnerabilities from time to time, but the bulk are related to the browser plug in applet sandbox and related deployment exploits. Off the top of my head Twitter, Google, Amazon and most of the largest Internet services use Java/JVM on the web...
- awnird 13y agoApple, Amazon, Twitter, Google, Red Hat etc. There is a big difference between server side and client side Java.
- baq 13y agothat's more holes than swiss cheese has... i can't name any other software that fixes this many remote exploits in a single release...
- flatline 13y agoI seem to recall that Windows 2000 had large releases to patch remotely exploitable bugs, but that was a whole other era in the field of security.
- smrtinsert 13y agoOk well, compare it to software projects on the same scale. When you're talking about an installed base of hundreds of millions across a variety of platforms things get a little complicated.
- deleted 13y ago[deleted]
- tptacek 13y agoDiscussion yesterday: https://news.ycombinator.com/item?id=7054790 https://news.ycombinator.com/item?id=7054790
- mytummyhertz 13y agoanyone have writeups for any of these CVE's?
- gnud 13y agoI'm beginning to suspect their vulerabilities are intentional, to trick me into accidentally installing the Ask toolbar.