Re:51% of 4M Docker images have critical vulnerabilities
by thu2111 on Friday December 18, 2020 @07:25AM
(#25466398)
Realistically a lot of Java apps are shipped as fat JARs that do in fact include the (Java) world.
Hot-patching apps to use newer versions of JARs because of security bugs, outside of the update stream of the actual app itself, is not really a good idea due to the risk of regressions. Docker has basically codified the failure of dynamic linking in the real world.
Hot-patching apps to use newer versions of JARs because of security bugs, outside of the update stream of the actual app itself, is not really a good idea due to the risk of regressions. Docker has basically codified the failure of dynamic linking in the real world.