Skip to content

HBASE-29651 Bump jruby to 9.4.14.0 to fix multiple CVEs (#7405) - #7424

Merged
NihalJain merged 1 commit into
apache:branch-3from
xavifeds8:HBASE-29651_branch-3
Nov 11, 2025
Merged

HBASE-29651 Bump jruby to 9.4.14.0 to fix multiple CVEs (#7405)#7424
NihalJain merged 1 commit into
apache:branch-3from
xavifeds8:HBASE-29651_branch-3

Conversation

@xavifeds8

Copy link
Copy Markdown
Contributor

This change fixes the following list of CVEs:

Signed-off-by: Nihal Jain nihaljain@apache.org
Signed-off-by: Pankaj Kumar pankajkumar@apache.org

(cherry picked from commit 305951e)

This change fixes the following list of CVEs:
- **CVE-2025-43857**: Fixed in JRuby 9.4.13.0
- **CVE-2025-27219**: Fixed in JRuby 9.4.14.0
- **CVE-2025-27220**: Fixed in JRuby 9.4.14.0
Signed-off-by: Nihal Jain <nihaljain@apache.org>
Signed-off-by: Pankaj Kumar <pankajkumar@apache.org>
(cherry picked from commit 305951e)
@NihalJainNihalJain added the backport This PR is a back port of some issue or issues already committed to master label Oct 30, 2025
@Apache-HBase

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 14sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+0 🆗codespell0m 0scodespell was not available.
+0 🆗detsecrets0m 0sdetect-secrets was not available.
+1 💚@author0m 0sThe patch does not contain any @author tags.
_ branch-3 Compile Tests _
+1 💚mvninstall8m 4sbranch-3 passed
+1 💚compile22m 4sbranch-3 passed
+1 💚spotless1m 24sbranch has no errors when running spotless:check.
_ Patch Compile Tests _
+1 💚mvninstall5m 25sthe patch passed
+1 💚compile14m 27sthe patch passed
+1 💚javac14m 27sthe patch passed
+1 💚blanks0m 0sThe patch has no blanks issues.
+1 💚xmllint0m 0sNo new issues.
+1 💚hadoopcheck15m 15sPatch does not cause any errors with Hadoop 3.3.6 3.4.1.
+1 💚spotless1m 0spatch has no errors when running spotless:check.
_ Other Tests _
+1 💚asflicense0m 17sThe patch does not generate ASF License warnings.
77m 7s
SubsystemReport/Notes
DockerClientAPI=1.48 ServerAPI=1.48 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7424/1/artifact/yetus-general-check/output/Dockerfile
GITHUB PR#7424
Optional Testsdupname asflicense javac codespell detsecrets xmllint hadoopcheck spotless compile
unameLinux 9c5e97f8169a 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-3 / 7917d64
Default JavaEclipse Adoptium-17.0.11+9
Max. process+thread count163 (vs. ulimit of 30000)
modulesC: . U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7424/1/console
versionsgit=2.34.1 maven=3.9.8 xmllint=20913
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@NihalJain
NihalJain merged commit b815b7a into apache:branch-3Nov 11, 2025
1 check failed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backportThis PR is a back port of some issue or issues already committed to master

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@xavifeds8@Apache-HBase@NihalJain