chris/emacs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

trying to fix

Browse source
This commit is contained in:
Chris Cochrun 2022-01-03 12:41:35 -06:00
parent fa407dfeb6
commit e013d7569e
22945 changed files with 447936 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
var/elfeed/db/data/2b/2bf3fbb172b9329b4869fb0d13c1d1a5d582d10d Normal file
View file

@ -0,0 +1 @@
<!-- SC_OFF --><div class="md"><p>Doing an arch-audit on my installed packages shows <a href="https://security.archlinux.org/AVG-2481">high-risk CVE</a> for java8-openjfx jre8-openjdk-headless packages with remote RCE. However, one of my programs requires these packages as a crucial dependency. Is there any way I could sandbox the java8 packages and run them without the risk of the CVE? Or is there any way around it</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/elmaaaaa"> /u/elmaaaaa </a> <br/> <span><a href="https://www.reddit.com/r/archlinux/comments/r1m1ss/java8_cve_how_to_sandbox_package/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/archlinux/comments/r1m1ss/java8_cve_how_to_sandbox_package/">[comments]</a></span>