4 ms·
Which is a security risk in that the jre can't be updated without an update to your product. Granted the same applies to go since it statically links to its run
by adrusi 12y ago
Which is a security risk in that the jre can't be updated without an update to your product. Granted the same applies to go since it statically links to its runtime.
- deleted 12y ago[deleted]
- hueving 12y agoNot really a security risk if you think of it like an embedded library in your software. A JRE vulnerability is then just like a vulnerability in the app itself and the vendor needs to update it.
- _delirium 12y agoThe majority of JRE vulnerabilities are also not really relevant to a local app in the first place. They're sandbox vulnerabilities that let carefully crafted applets break out of the sandbox and execute arbitrary code. But regularly installed desktop/server software doesn't run in the applet sandbox, and is already assumed to be able to execute arbitrary code.