You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa groovy-sandbox

Sigurnosni nedostatak programskog paketa groovy-sandbox

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

Fedora Update Notification
2015-04-06 04:54:48

Name : groovy-sandbox
Product : Fedora 21
Version : 1.8
Release : 1.fc21
Summary : Groovy sandbox for executing untrusted Groovy scripts safely
Description :
This project defines a Groovy CompilationCustomizer, which allows a
program to execute Groovy script in a restricted sandbox environment. It
is useful for applications that want to provide some degree of
scriptability to users, without allowing them to execute System.exit(0)
or any other undesirable operations.

This compile-time transformation modifies untrusted Groovy script in
such a way that every operation that can cause interactions with the
external world gets intercepted. This allows your code to examine and
deny executions. This includes every method call, object allocations,
property/attribute access, array access, and so on.

Update Information:

Fix CVE-2015-1806 (SECURITY-125)

This update can be installed with the “yum” update program. Use
su -c ‘yum update groovy-sandbox’ at the command line.
For more information, refer to “Managing Software with yum”,
available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list

AutorMarko Stanec
Cert idNCERT-REF-2015-04-0017-ADV
More in Preporuke
Sigurnosni propust programskog paketa jenkins-script-security-plugin

Otkriveni je sigurnosni propust u programskom paketu jenkins-script-security-plugin za operacijski sustav Fedora. Otkriveni propust potencijalnim napadačima omogućuje stjecanje povećanih korisničkih...