You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: SECURITY.md
+3-6Lines changed: 3 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,9 +1,6 @@
1
1
# Reporting Security Vulnerabilities
2
2
3
-
The GraalVM team values the independent security research community and believes
4
-
that responsible disclosure of security vulnerabilities in GraalVM Community
5
-
Edition as well as GraalVM Enterprise Edition helps us ensure the security and
6
-
privacy of all our users.
3
+
The GraalVM team values the independent security research community and believes that responsible disclosure of security vulnerabilities in GraalVM helps us ensure the security and privacy of all our users.
7
4
8
5
If you believe you have found a security vulnerability, please submit a report
9
6
to secalert_us@oracle.com preferably with a proof of concept. Please refer to
@@ -16,7 +13,7 @@ other channels about a report.
16
13
### Security Updates, Alerts and Bulletins
17
14
18
15
GraalVM Community Edition security updates will be released on a quarterly basis
19
-
in conjunction withe GraalVM Enterprise Edition security updates that are part
16
+
in conjunction with the Oracle GraalVM security updates that are part
20
17
of the Oracle Critical Patch Update program. Security updates are released on
21
18
the Tuesday closest to the 17th day of January, April, July and October. A
22
19
pre-release announcement will be published on the Thursday preceding each
Copy file name to clipboardExpand all lines: docs/contributor/CONTRIBUTING.md
+3-5Lines changed: 3 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -235,9 +235,9 @@ another double-dash:
235
235
Note that there may be a little confusion about the configuration names of
236
236
benchmarks.
237
237
238
-
##### GraalVM Community and GraalVM Enterprise configurations
238
+
##### GraalVM Community Edition and Oracle GraalVM configurations
239
239
240
-
We have benchmarks for GraalVM Community and Enterprise. For historical reasons,
240
+
We have benchmarks for GraalVM Community Edition and Oracle GraalVM. For historical reasons,
241
241
these are sometimes referred to in some config files as *CE* and *EE*; *core*
242
242
and *enterprise*; *graalvm_ce* and *graalvm_ee*; or *graalpython_core* and
243
243
*graalpython_enterprise*, respectively.
@@ -252,9 +252,7 @@ via the `--python-vm-config` parameter:
252
252
*`native` - same as `default`, its name is due to the fact that it runs C
253
253
extensions using a mixture of LLVM bitcode interpreted and compiled via
254
254
GraalVM and real native libraries
255
-
*`sandboxed` - this name is historical - this configuration requires a GraalVM
256
-
Enterprise and runs all C extensions purely as LLVM bitcode on the GraalVM,
257
-
without any access to the native OS libraries, i.e., using the
255
+
*`sandboxed` - this name is historical - this configuration requires Oracle GraalVM and runs all C extensions purely as LLVM bitcode on the GraalVM, without any access to the native OS libraries, i.e., using the
258
256
`--llvm.managed` option for GraalVM.
259
257
260
258
##### Configuration of the underlying GraalVM runtime
Copy file name to clipboardExpand all lines: docs/user/OsInterface.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,7 +25,7 @@ This approach is the most compatible with CPython and provides bare access to th
25
25
By default, this implementation bypasses the Truffle abstraction layer, therefore it is not sandboxed and does not support custom implementations of [Truffle FileSystem service-provider](https://www.graalvm.org/truffle/javadoc/org/graalvm/polyglot/io/FileSystem.html), and other Polyglot API providers related to system interfaces.
26
26
27
27
The native backend is chosen by default when GraalVM Python is started via the `graalpy` or any other Python related launcher inside GraalVM.
28
-
The exception are Python related launchers with `-managed` suffix available only in GraalVM Enterprise (for example, `graalpy-managed`), which by default use the `java` POSIX backend.
28
+
The exception are Python related launchers with `-managed` suffix available only in Oracle GraalVM (for example, `graalpy-managed`), which by default use the `java` POSIX backend.
29
29
30
30
### Limitations of the Native Backend
31
31
@@ -39,7 +39,7 @@ Known limitations are:
39
39
The `java` backend uses the [Truffle abstraction layer](https://github.com/oracle/graal/blob/master/truffle/docs/README.md) and therefore supports custom Polyglot API providers related to system interfaces and sandboxing.
40
40
Since this abstraction is POSIX agnostic, it does not expose all the necessary functionality. Some functionality is emulated, and some functionality is not supported at all.
41
41
42
-
The Java backend is the default when GraalVM Python is run via the `Context` API, i.e., [embedded in Java applications](https://github.com/oracle/graal/blob/master/docs/reference-manual/embedding/embed-languages.md), or when it is launched using Python related launchers with `-managed` suffix available only in GraalVM Enterprise.
42
+
The Java backend is the default when GraalVM Python is run via the `Context` API, i.e., [embedded in Java applications](https://github.com/oracle/graal/blob/master/docs/reference-manual/embedding/embed-languages.md), or when it is launched using Python related launchers with `-managed` suffix available only in Oracle GraalVM.
Copy file name to clipboardExpand all lines: docs/user/ParserDetails.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -83,7 +83,7 @@ these language options:
83
83
Note that a Python context will not enable writing `.pyc` files by default.
84
84
The `graalpy` launcher enables it by default, but if this is desired in the embedding use case, care should be taken to ensure that the `__pycache__` location is properly managed and the files in that location are secured against manipulation just like the source `.py` files they were derived from.
85
85
86
-
Note also that to upgrade the application sources to GraalVM Enteprise's Python runtime, old `.pyc`
86
+
Note also that to upgrade the application sources to Oracle GraalVM Python runtime, old `.pyc`
87
87
files must be removed by the embedder as required.
0 commit comments