You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hbase.apache.org by ni...@apache.org on 2025/05/29 10:34:47 UTC
(hbase) branch master updated: HBASE-29318 Bump jruby to 9.4.12.1 to fix jruby-openssl CVEs (#6997)
This is an automated email from the ASF dual-hosted git repository.
nihaljain pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hbase.git
The following commit(s) were added to refs/heads/master by this push:
new ecaa9481ba7 HBASE-29318 Bump jruby to 9.4.12.1 to fix jruby-openssl CVEs (#6997)
ecaa9481ba7 is described below
commit ecaa9481ba785ef3e1b6663cbb737fd04e720ff7
Author: Nihal Jain <ni...@apache.org>
AuthorDate: Thu May 29 16:04:41 2025 +0530
HBASE-29318 Bump jruby to 9.4.12.1 to fix jruby-openssl CVEs (#6997)
- Drops moderate jruby-openssl CVE: CVE-2025-46551 and GHSA-72qj-48g4-5xgx from our classpath.
- Also fixes performance problem in IRB where pasting clipboard content is extremely slow.
Signed-off-by: Duo Zhang <zh...@apache.org>
Signed-off-by: Pankaj <pa...@apache.org>
Signed-off-by: Tak Lon (Stephen) Wu <ta...@apache.org>
Reviewed-by: Junegunn Choi <ju...@gmail.com>
---
pom.xml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/pom.xml b/pom.xml
index 1099e2e0776..66af61df5a9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -866,7 +866,7 @@
<servlet.api.version>3.1.0</servlet.api.version>
<wx.rs.api.version>2.1.1</wx.rs.api.version>
<tomcat.jasper.version>9.0.104</tomcat.jasper.version>
- <jruby.version>9.4.9.0</jruby.version>
+ <jruby.version>9.4.12.1</jruby.version>
<junit.version>4.13.2</junit.version>
<hamcrest.version>1.3</hamcrest.version>
<opentelemetry.version>1.49.0</opentelemetry.version>
@@ -890,8 +890,8 @@
<jamon-runtime.version>2.4.1</jamon-runtime.version>
<jettison.version>1.5.4</jettison.version>
<!--Make sure these joni/jcodings are compatible with the versions used by jruby-->
- <joni.version>2.2.1</joni.version>
- <jcodings.version>1.0.58</jcodings.version>
+ <joni.version>2.2.3</joni.version>
+ <jcodings.version>1.0.61</jcodings.version>
<spy.version>2.12.3</spy.version>
<bouncycastle.version>1.78</bouncycastle.version>
<skyscreamer.version>1.5.1</skyscreamer.version>