Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Oracle JRE is literally one of the more vulnerable pieces of software underpinning the web and computing as a whole.

JRE CVEs: http://www.cvedetails.com/vulnerability-list/vendor_id-93/pr...

It's been 5 years since Oracle took over Java, so they can't claim it was left over.

Oracle's security record is terrible by all accounts, so how can their CSO justify anything in this blog post?

ORACLE product list CVEs: http://www.cvedetails.com/product-list/product_type-/firstch...



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: