maintainer-feedback requested: [Bug 253822] lang/jruby: Update to 9.2.15.0
    bugzilla-noreply at freebsd.org 
    bugzilla-noreply at freebsd.org
       
    Wed Feb 24 20:08:41 UTC 2021
    
    
  
Bugzilla Automation <bugzilla at FreeBSD.org> has asked freebsd-ruby (Nobody)
<ruby at FreeBSD.org> for maintainer-feedback:
Bug 253822: lang/jruby: Update to 9.2.15.0
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253822
--- Description ---
This includes fixes for various security issues, in particular:
* CVE-2011-4815 (predictable hashing DoS)
* CVE-2017-17742, CVE-2019-16254, CVE-2020-25613 (WeBrick request
smuggling/splitting)
* CVE-2017-18640 (SnakeYAML entity expansion DoS)
As well as fixes for File.stat/lstat on FreeBSD 12 and later, which previously
rendered JRuby unusable on these systems.
Port passes portlint and poudriere testport.
    
    
More information about the freebsd-ruby
mailing list