Re: [racket-users] Security advisory for racket/sandbox; fixed in v8.2

2021-07-19 Thread Sage Gerard
Thank you for letting us know. ~slg Original Message On Jul 19, 2021, 2:35 PM, Sam Tobin-Hochstadt wrote: > The Racket team recently became aware of a security vulnerability in > the `racket/sandbox` library. Code evaluated using a sandbox could > cause system modules to

[racket-users] Security advisory for racket/sandbox; fixed in v8.2

2021-07-19 Thread Sam Tobin-Hochstadt
The Racket team recently became aware of a security vulnerability in the `racket/sandbox` library. Code evaluated using a sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow system functions to be controlled by the