You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
JRuby 9.2.x is compatible with Ruby 2.5.x and stays in sync with C Ruby. As always there is a mix of miscellaneous fixes so be sure to read the issue list below. All users are encouraged to upgrade.
11
+
12
+
13
+
This is a security release to address CVE-2021-41817. It was originally reported against Ruby's C-based date extension, which JRuby does not use, but JRuby's own implementation of date is also affected by the same issue.
14
+
15
+
The issue affects calls to various Date and DateTime parsing methods with extremely long strings. The regular expressions associated with these methods may run much longer than desired or never return.
16
+
17
+
The fix is detailed in #6951. A workaround is provided, via patching the pure-Ruby date code in your own JRuby install. Rebuilding JRuby is not necessary. This PR is the only functional difference from JRuby 9.2.20.0.
18
+
19
+
We recommend that all JRuby 9.2 users upgrade.
20
+
21
+
-[#6951 - Limit Date.parse input length and make interruptible](https://github.com/jruby/jruby/pull/6951)
<p>JRuby 9.2.20.0 is our point release of our Ruby 2.5.x support. Please check out our <ahref='/2021/11/02/jruby-9-2-20-0'>release notes</a> for more information.</p>
31
+
<p>JRuby 9.2.20.1 is our point release of our Ruby 2.5.x support. Please check out our <ahref='/2021/12/01/jruby-9-2-20-1'>release notes</a> for more information.</p>
0 commit comments