[Freedombox-discuss] Java vulnerabilities

2015-06-16 Thread Sandy Harris
A rather scary article: http://www.itworld.com/article/2936575/security/software-applications-have-on-average-24-vulnerabilities-inherited-from-buggy-components.html Does the current Fbox implementation use Java? Should we eliminate it as a matter of necessary security policy? If not, how can we d

Re: [Freedombox-discuss] Java vulnerabilities

2015-06-16 Thread Sean Alexandre
I think this is less of an issue for FreedomBox because it's based on Debian, and Debian packages get security updates. This should update a FreedomBox with any security patches: apt-get update apt-get upgrade To me this is one of the beautiful things about Debian (or any distro that has acti

Re: [Freedombox-discuss] Java vulnerabilities

2015-06-16 Thread Jonas Smedegaard
Quoting Sean Alexandre (2015-06-16 14:25:32) > I think this is less of an issue for FreedomBox because it's based on > Debian, and Debian packages get security updates. This should update a > FreedomBox with any security patches: > > apt-get update > apt-get upgrade ...which specifically for Fr

Re: [Freedombox-discuss] Java vulnerabilities

2015-06-16 Thread Petter Reinholdtsen
[Sandy Harris] > A rather scary article: > http://www.itworld.com/article/2936575/security/software-applications-have-on-average-24-vulnerabilities-inherited-from-buggy-components.html I find the article mostly stupid, I must admit. It keep repeating that the problem is caused by the use of open