Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 21: 2015-5637 Moderate: Groovy Sandbox Security Fix

fedora
Calendar Grey April 18, 2015
Dist Fedora Esm H88
The CVE-2019-1234 resolution using Node.js in Ubuntu 18.04 boosts script protection and cybersecurity protocols.
Fix CVE-2015-1806 (SECURITY-125)

Summary

This project defines a Groovy CompilationCustomizer, which allows a

program to execute Groovy script in a restricted sandbox environment. It

is useful for applications that want to provide some degree of

scriptability to users, without allowing them to execute System.exit(0)

or any other undesirable operations.

This compile-time transformation modifies untrusted Groovy script in

such a way that every operation that can cause interactions with the

external world gets intercepted. This allows your code to examine and

deny executions. This includes every method call, object allocations,

property/attribute access, array access, and so on.

Update Information:

Fix CVE-2015-1806 (SECURITY-125)

Topics%20covered

Topics Covered

security advisory moderate Fedora groovy sandbox script safety

Change Log

References

Fedora Update Notification FEDORA-2015-5637 2015-04-06 04:54:48
Name : groovy-sandbox Product : Fedora 21 Version : 1.8 Release : 1.fc21 URL : Summary : Groovy sandbox for executing untrusted Groovy scripts safely Description : This project defines a Groovy CompilationCustomizer, which allows a program to execute Groovy script in a restricted sandbox environment. It is useful for applications that want to provide some degree of scriptability to users, without allowing them to execute System.exit(0) or any other undesirable operations.
This compile-time transformation modifies untrusted Groovy script in such a way that every operation that can cause interactions with the external world gets intercepted. This allows your code to examine and deny executions. This includes every method call, object allocations, property/attribute access, array access, and so on.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update groovy-sandbox' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: groovy-sandbox
Product: Fedora 21
Version: 1.8
Release: 1.fc21
URL:
Summary: Groovy sandbox for executing untrusted Groovy scripts safely

Topics%20covered

Topics Covered

security advisory moderate Fedora groovy sandbox script safety

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here