The JRuby community is pleased to announce the release of JRuby 9.3.9.0
- Homepage: https://www.jruby.org/
- Download: Downloads — JRuby.org
JRuby 9.3.x is compatible with Ruby 2.6.x and stays in sync with C Ruby. As
always there is a mix of miscellaneous fixes so be sure to read the issue
list below.
Thanks to our contributors this cycle for helping to improve stability and
compatibility of JRuby 9.3: @chadlwilson, @coheigea
Standard Library
- rdoc has been updated to 6.3.3 to fix all known CVEs. (#7396, #7404)
- rexml has been updated to 3.2.5 to fix all known CVEs. (#7395, #7405)
- jruby-openssl has been updated to 0.14.0 to fix weak HMAC key hashing
in bouncycastle, which itself is updated to 1.71. (#7335, #7385, #7399)
- psych has been updated to 3.3.4 to fix CVE-2022-38752 in the SnakeYAML
library, which itself is updated to 1.33. (#7386, #7388, #7400)
- rubygems has been updated to 3.2.33 and bundler updated to 2.2.33 to
address CVE-2021-43809. (#7397, #7401)
Github Issues resolved for 9.3.9.0
#5588 - OpenSSL::PKey::RSA.new without password results in terminal
input failure
#7335 - Upgrade jruby-openssl to 0.14.0
#7367 - StringIO ignores external encoding on Windows
#7380 - [Tiny issue] swing2.rb example at
jruby/swing2.rb at master · jruby/jruby · GitHub has a warning,
“swing.rb:4: warning: import is deprecated; use java_import”
#7385 - Updating jruby-openssl to 0.14.0
#7386 - Update SnakeYaml to 1.32+ due to CVE-2022-38752
#7388 - Update to Psych 3.3.4
#7395 - Update embedded rexml in jruby-complete
#7396 - Update rdoc in jruby-complete
#7397 - Update bundler in jruby-complete
#7399 - Update bouncycastle in jruby-complete
#7400 - Update snakeyaml in jruby-complete
#7401 - [deps] update Bundler/Rubygems to latest patch
#7404 - Update rdoc to 6.3.3 to fix known CVEs
#7405 - Update rexml to 3.2.5 to fix known CVEs
#7406 - Time.at with fractional seconds and :in doubles timezone offset
#7407 - Better match CRuby zone negotiation
#7416 - Regexp new none option
···
--
blog: http://blog.enebo.com twitter: tom_enebo
mail: tom.enebo@gmail.com