Subsonic Forum

Hey,

As you've read from the news in various sources lately, there's another 0-day issues with Java security.
I have my Subsonic running with open frontend to the internet to access it with my work environment and also with my mobile device(s).

Is there already a solution, of how to run Subsonic without having Java installed on a server?
If so, please link the topic..tried to search but that did not lead me quite far.

I'm using Subsonic 4.7 (build 3106) on Windows 7 machine.

Thanks

As long as you don't allow your browser to execute arbitrary Java code, you're fine. There's no issue with running a Java based program on your desktop. For Firefox, there are loads of plugins like NoScript, AdBlock, Flashblock etc which effectively stops all unwanted plugins, or you could turn it off from your browser settings.

If you for some reason don't want Java installed on your computer, you have to find a different media server.

Like hakko said so far all of the 0-day exploits have been from the browser plugin, not from Java itself. I mean don't get me wrong the jetty library that is being used to run Subsonic is supposed to be extremely easy to hack, but that is a different from Java

Update java and the problem goes away Java 1.7.11 or 1.6.38

Thanks for the comments. The Java update came so fast I did not even notice it was out..