[SECURITY] Fedora 40 Update: clojure-1.11.2-1.fc40
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-f7745a5990
2024-03-23 00:20:56.401933
--------------------------------------------------------------------------------
Name : clojure
Product : Fedora 40
Version : 1.11.2
Release : 1.fc40
URL : http://clojure.org/
Summary : A dynamic programming language that targets the Java Virtual Machine
Description :
Clojure is a dynamic programming language that targets the Java
Virtual Machine. It is designed to be a general-purpose language,
combining the approachability and interactive development of a
scripting language with an efficient and robust infrastructure for
multithreaded programming. Clojure is a compiled language - it
compiles directly to JVM bytecode, yet remains completely
dynamic. Every feature supported by Clojure is supported at
runtime. Clojure provides easy access to the Java frameworks, with
optional type hints and type inference, to ensure that calls to Java
can avoid reflection.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2024-22871
Update to upstream release 1.11.2
--------------------------------------------------------------------------------
ChangeLog:
* Fri Mar 15 2024 Markku Korkeala <markku.korkeala(a)iki.fi> - 1:1.11.2-1
- Update to upstream release 1.11.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2266785 - CVE-2024-22871 clojure: denial of service (DoS) via the
clojure.core$partial$fn__5920 function.
https://bugzilla.redhat.com/show_bug.cgi?id=2266785
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-f7745a5990' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------