Re: Recent Java Sandbox escapes

2020-09-09 Thread Andrew Haley
On 19/08/2020 22:46, Alkanor Oumbratok wrote: > > I may be wrong on both points, and I would be really grateful if > someone could explain why these 2 CVE have been rated this high > whereas at first glance there isn't any really exploitable related > scenario. The first rule of the OpenJDK

Recent Java Sandbox escapes

2020-08-19 Thread Alkanor Oumbratok
Hello people, I am kind of new to this kind of mailing list, so do not hesitate to indicate to me if I have any inappropriate behavior (even if I hope it should not be the case). I recently came upon Java and Java security related aspects, mostly around the SecurityManager and what orbits