On 13/12/2021 9:03 pm, David Crayford wrote:

Agreed. Although Java itself does have security vulnerabilities and patches are released frequently. It's critical to stay up to date with service https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities

It does, but most of them seem to be related to sandboxing untrusted code (I didn't read them all). Are there any security issues that makes Java less secure than a language like COBOL or assembler? E.g. allow someone on your system running Java code under their userid to gain access they don't already have?

I'm processing SMF data in Java, and I don't really see that as a security risk, even though some people tell me it is, because Java. (They also keep telling me Java is slow, you can't use it for SMF data etc...) I wouldn't suggest people skip security maintenance, but I don't think you're creating a vulnerability just by running a Java program. But I'm not a security expert.


Andrew Rowley

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to