Why is Java so insecure? Buggy open source components take the blame

Hard-to-patch bugs in Java applications are proving a difficult problem to solve.