-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2024-54270ec4b3 2024-02-05 00:33:15.375985 --------------------------------------------------------------------------------
Name : clojure Product : Fedora EPEL 7 Version : 1.8.0 Release : 2.el7 URL : http://clojure.org/ Summary : A dynamic programming language that targets the Java Virtual Machine Description : Clojure is a dynamic programming language that targets the Java Virtual Machine. It is designed to be a general-purpose language, combining the approachability and interactive development of a scripting language with an efficient and robust infrastructure for multithreaded programming. Clojure is a compiled language - it compiles directly to JVM bytecode, yet remains completely dynamic. Every feature supported by Clojure is supported at runtime. Clojure provides easy access to the Java frameworks, with optional type hints and type inference, to ensure that calls to Java can avoid reflection. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-20189 -------------------------------------------------------------------------------- ChangeLog: * Sat Jan 27 2024 Markku Korkeala <Markku Korkeala iki fi> - 1:1.8.0-2 - Add patch clj-2204 to mitigate CVE-2017-20189. * Thu Apr 2 2020 Markku Korkeala <Markku Korkeala iki fi> - 1:1.8.0-1 - New upstream release. - Replace add_maven_depmap macros with mvn_artifact and mvn_install -------------------------------------------------------------------------------- References: [ 1 ] Bug #2259513 - CVE-2017-20189 clojure: executes arbitrary code upon deserialization https://bugzilla.redhat.com/show_bug.cgi?id=2259513 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update clojure' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ epel-package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
