Re: [racket-users] Security advisory for racket/sandbox; fixed in v8.2

2021-07-19 Thread Sage Gerard
Thank you for letting us know. ~slg Original Message On Jul 19, 2021, 2:35 PM, Sam Tobin-Hochstadt wrote: > The Racket team recently became aware of a security vulnerability in > the `racket/sandbox` library. Code evaluated using a sandbox could > cause system modules to incorr

[racket-users] Security advisory for racket/sandbox; fixed in v8.2

2021-07-19 Thread Sam Tobin-Hochstadt
The Racket team recently became aware of a security vulnerability in the `racket/sandbox` library. Code evaluated using a sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow system functions to be controlled by the

Re: [racket-users] Can I get the behavior of `overment` followed by `augride` with a single class?

2021-07-19 Thread Matthew Flatt
I agree that this doesn't look possible within a single class, but I don't see any problem with the pattern (aside from being awkward to write). As far as I can tell, it would make sense for `class` to support new a case that fuses your `overment` plus `augride` steps. Internally, that would create