Skip to content

Commit 7917d64

Browse files
committed
HBASE-29651 Bump jruby to 9.4.14.0 to fix multiple CVEs (apache#7405)
This change fixes the following list of CVEs: - **CVE-2025-43857**: Fixed in JRuby 9.4.13.0 - **CVE-2025-27219**: Fixed in JRuby 9.4.14.0 - **CVE-2025-27220**: Fixed in JRuby 9.4.14.0 Signed-off-by: Nihal Jain <nihaljain@apache.org> Signed-off-by: Pankaj Kumar <pankajkumar@apache.org> (cherry picked from commit 305951e)
1 parent d6350e6 commit 7917d64

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

pom.xml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -842,7 +842,7 @@
842842
<servlet.api.version>4.0.1</servlet.api.version>
843843
<wx.rs.api.version>2.1.1</wx.rs.api.version>
844844
<tomcat.jasper.version>9.0.110</tomcat.jasper.version>
845-
<jruby.version>9.4.12.1</jruby.version>
845+
<jruby.version>9.4.14.0</jruby.version>
846846
<junit.jupiter.version>5.13.4</junit.jupiter.version>
847847
<junit.vintage.version>5.13.4</junit.vintage.version>
848848
<hamcrest.version>1.3</hamcrest.version>
@@ -867,8 +867,8 @@
867867
<jamon-runtime.version>2.4.1</jamon-runtime.version>
868868
<jettison.version>1.5.4</jettison.version>
869869
<!--Make sure these joni/jcodings are compatible with the versions used by jruby-->
870-
<joni.version>2.2.3</joni.version>
871-
<jcodings.version>1.0.61</jcodings.version>
870+
<joni.version>2.2.5</joni.version>
871+
<jcodings.version>1.0.63</jcodings.version>
872872
<spy.version>2.12.3</spy.version>
873873
<bouncycastle.version>1.81</bouncycastle.version>
874874
<skyscreamer.version>1.5.1</skyscreamer.version>

0 commit comments

Comments
 (0)