Skip to content

HBASE-29651 Bump jruby to 9.4.14.0 to fix multiple CVEs (#7405) - #7427

Merged
NihalJain merged 1 commit into
apache:branch-2from
xavifeds8:HBASE-29651_branch-2
Nov 11, 2025
Merged

HBASE-29651 Bump jruby to 9.4.14.0 to fix multiple CVEs (#7405)#7427
NihalJain merged 1 commit into
apache:branch-2from
xavifeds8:HBASE-29651_branch-2

Conversation

@xavifeds8

Copy link
Copy Markdown
Contributor

This change fixes the following list of CVEs:

Signed-off-by: Nihal Jain nihaljain@apache.org
Signed-off-by: Pankaj Kumar pankajkumar@apache.org

(cherry picked from commit 305951e)

This change fixes the following list of CVEs:
- **CVE-2025-43857**: Fixed in JRuby 9.4.13.0
- **CVE-2025-27219**: Fixed in JRuby 9.4.14.0
- **CVE-2025-27220**: Fixed in JRuby 9.4.14.0
Signed-off-by: Nihal Jain <nihaljain@apache.org>
Signed-off-by: Pankaj Kumar <pankajkumar@apache.org>
(cherry picked from commit 305951e)
@NihalJainNihalJain added the backport This PR is a back port of some issue or issues already committed to master label Oct 31, 2025
@Apache-HBase

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 17sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+0 🆗codespell0m 0scodespell was not available.
+0 🆗detsecrets0m 0sdetect-secrets was not available.
+1 💚@author0m 0sThe patch does not contain any @author tags.
_ branch-2 Compile Tests _
+1 💚mvninstall10m 49sbranch-2 passed
+1 💚compile16m 48sbranch-2 passed
+1 💚spotless1m 35sbranch has no errors when running spotless:check.
_ Patch Compile Tests _
+1 💚mvninstall7m 49sthe patch passed
+1 💚compile18m 40sthe patch passed
+1 💚javac18m 40sthe patch passed
+1 💚blanks0m 0sThe patch has no blanks issues.
+1 💚xmllint0m 0sNo new issues.
+1 💚hadoopcheck34m 45sPatch does not cause any errors with Hadoop 2.10.2 or 3.3.6 3.4.1.
+1 💚spotless1m 23spatch has no errors when running spotless:check.
_ Other Tests _
+1 💚asflicense0m 18sThe patch does not generate ASF License warnings.
94m 47s
SubsystemReport/Notes
DockerClientAPI=1.48 ServerAPI=1.48 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7427/1/artifact/yetus-general-check/output/Dockerfile
GITHUB PR#7427
Optional Testsdupname asflicense javac codespell detsecrets xmllint hadoopcheck spotless compile
unameLinux fb59217b7db6 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionbranch-2 / 5787fac
Default JavaEclipse Adoptium-11.0.23+9
Max. process+thread count67 (vs. ulimit of 30000)
modulesC: . U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7427/1/console
versionsgit=2.34.1 maven=3.9.8 xmllint=20913
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@NihalJain
NihalJain merged commit 470fe19 into apache:branch-2Nov 11, 2025
1 check failed
Asmoday pushed a commit to arenadata/hbase that referenced this pull request Apr 15, 2026
…apache#7427)
This change fixes the following list of CVEs:
- **CVE-2025-43857**: Fixed in JRuby 9.4.13.0
- **CVE-2025-27219**: Fixed in JRuby 9.4.14.0
- **CVE-2025-27220**: Fixed in JRuby 9.4.14.0
Signed-off-by: Nihal Jain <nihaljain@apache.org>
Signed-off-by: Pankaj Kumar <pankajkumar@apache.org>
(cherry picked from commit 305951e)
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backportThis PR is a back port of some issue or issues already committed to master

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@xavifeds8@Apache-HBase@NihalJain