Uh oh!
There was an error while loading. Please reload this page.
HBASE-27921: Bump up jruby to 9.4.2.0 and related joni and jcodings to 2.1.48 and 1.0.58 respectively - #5274
Conversation
Apache-HBase
commented
Jun 7, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Jun 8, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Jun 8, 2023
💔 -1 overall
This message was automatically generated. |
f75451b to
4eb269cCompareApache-HBase
commented
Jun 8, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Jun 8, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Jun 8, 2023
💔 -1 overall
This message was automatically generated. |
…o 2.1.48 and 1.0.58 respectively
4eb269c to
8e5675eCompareApache-HBase
commented
Jun 8, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Jun 9, 2023
🎊 +1 overall
This message was automatically generated. |
Apache-HBase
commented
Jun 9, 2023
🎊 +1 overall
This message was automatically generated. |
Apache9
commented
Jun 10, 2023
@busbey I think it is OK to bump the jruby version for master, branch-3 and branch-2, I'm not sure if it is OK to bump them for other 2.x release lines. WDYT? Thanks. |
@Apache9@busbey please do not merge this PR. Looks like We should wait for |
Apache9
commented
Dec 16, 2023
Close in favor of #5568 |
MOTIVATION
Current version of
jruby(9.3.9.0) hassnakeyamldependency version1.33which is affected by critical CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471SOLUTION
jrubyto the latest version;9.4.2.0joniandjcodingsto2.1.48and1.0.58respectively-W0option toJRUBY_OPTSas it outputs below warning whenhbaseshell is launched;CHECKS
snakeyamldependency;