[GROOVY-6210] Fix javadoc/groovydoc vulnerability

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.5
• Fix Version/s: 2.1.6
• Component/s: Documentation
• Assignee: Cédric Champeau
• Reporter: Cédric Champeau
• Created: 19/Jun/13 07:21
• Updated: 15/Oct/15 18:19
• Resolved: 19/Jun/13 08:48

Description

Both javadoc and groovydoc are vulnerable to an issue fixed only in JDK 1.7.0 update 25.

See
[1] http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
[2] http://www.kb.cert.org/vuls/id/225657

The build should be patched to fix the generated files independently of the JDK being used to build Groovy.