Skip to content

Commit 07c815a

Browse files
committed
we did not do securit only release
1 parent 26e3d63 commit 07c815a

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

_posts/2021-12-02-jruby-9-3-2-0.markdown

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ Security
1616

1717
* Date-parsing methods have been modified to accept an input-size `limit` option. This addresses [CVE-2021-41817](https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/). It was originally reported against Ruby's C-based `date` extension, which JRuby does not use, but JRuby's own implementation of `date` is also affected by the same issue.
1818

19-
The fix is detailed in [#6952](https://github.com/jruby/jruby/pull/6952). A workaround is provided, via patching the pure-Ruby `date` code in your own JRuby install. Rebuilding JRuby is not necessary. This PR is the only functional difference from JRuby 9.3.1.0.
19+
The fix is detailed in [#6952](https://github.com/jruby/jruby/pull/6952). A workaround is provided, via patching the pure-Ruby `date` code in your own JRuby install. Rebuilding JRuby is not necessary.
2020
* In order to match Ruby behavior and permit interrupting these date-parsing regular expression matches, this release also enables interruptible regular expressions globally. This feature can be disabled using the "regexp.interruptible" JRuby option as described in the above PR.
2121

2222
Performance

0 commit comments

Comments
 (0)