Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora 22: FEDORA-2015-5643 Critical: Groovy-Sandbox Security Issue

fedora
Calendar Grey April 21, 2015
Scroller Fedora
The latest Fedora enhancement for groovy-sandbox fixes a significant security vulnerability. This update is crucial for developers working with Groovy scripting.
Fix CVE-2015-1806 (SECURITY-125)

Summary

This project defines a Groovy CompilationCustomizer, which allows a

program to execute Groovy script in a restricted sandbox environment. It

is useful for applications that want to provide some degree of

scriptability to users, without allowing them to execute System.exit(0)

or any other undesirable operations.

This compile-time transformation modifies untrusted Groovy script in

such a way that every operation that can cause interactions with the

external world gets intercepted. This allows your code to examine and

deny executions. This includes every method call, object allocations,

property/attribute access, array access, and so on.

Update Information:

Fix CVE-2015-1806 (SECURITY-125)

Topics%20covered

Topics Covered

security advisory security issue critical Fedora script execution groovy-sandbox

Change Log

References

Fedora Update Notification FEDORA-2015-5643 2015-04-06 16:25:16
Name : groovy-sandbox Product : Fedora 22 Version : 1.8 Release : 1.fc22 URL : Summary : Groovy sandbox for executing untrusted Groovy scripts safely Description : This project defines a Groovy CompilationCustomizer, which allows a program to execute Groovy script in a restricted sandbox environment. It is useful for applications that want to provide some degree of scriptability to users, without allowing them to execute System.exit(0) or any other undesirable operations.
This compile-time transformation modifies untrusted Groovy script in such a way that every operation that can cause interactions with the external world gets intercepted. This allows your code to examine and deny executions. This includes every method call, object allocations, property/attribute access, array access, and so on.

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update groovy-sandbox' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: groovy-sandbox
Product: Fedora 22
Version: 1.8
Release: 1.fc22
URL:
Summary: Groovy sandbox for executing untrusted Groovy scripts safely

Topics%20covered

Topics Covered

security advisory security issue critical Fedora script execution groovy-sandbox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.