Fedora 21: groovy-sandbox Security Update
Summary
This project defines a Groovy CompilationCustomizer, which allows a
program to execute Groovy script in a restricted sandbox environment. It
is useful for applications that want to provide some degree of
scriptability to users, without allowing them to execute System.exit(0)
or any other undesirable operations.
This compile-time transformation modifies untrusted Groovy script in
such a way that every operation that can cause interactions with the
external world gets intercepted. This allows your code to examine and
deny executions. This includes every method call, object allocations,
property/attribute access, array access, and so on.
Update Information:
Fix CVE-2015-1806 (SECURITY-125)
Change Log
References
Fedora Update Notification FEDORA-2015-5637 2015-04-06 04:54:48 Name : groovy-sandbox Product : Fedora 21 Version : 1.8 Release : 1.fc21 URL : http://groovy-sandbox.kohsuke.org Summary : Groovy sandbox for executing untrusted Groovy scripts safely Description : This project defines a Groovy CompilationCustomizer, which allows a program to execute Groovy script in a restricted sandbox environment. It is useful for applications that want to provide some degree of scriptability to users, without allowing them to execute System.exit(0) or any other undesirable operations. This compile-time transformation modifies untrusted Groovy script in such a way that every operation that can cause interactions with the external world gets intercepted. This allows your code to examine and deny executions. This includes every method call, object allocations, property/attribute access, array access, and so on.
Update Instructions
This update can be installed with the "yum" update program. Use su -c 'yum update groovy-sandbox' at the command line. For more information, refer to "Managing Software with yum", available at .
