Nihal Jain created HBASE-28250:
----------------------------------

             Summary: Bump jruby to 9.4.5.0 and related joni and jcodings
                 Key: HBASE-28250
                 URL: https://issues.apache.org/jira/browse/HBASE-28250
             Project: HBase
          Issue Type: Task
            Reporter: Nihal Jain
            Assignee: Nihal Jain


Given branch-2 including branch-2.6 is already on 9.3.9.0, we should bump to at 
least 9.3.13.0. This will fix the bundled *org.bouncycastle : bcprov-jdk18on : 
1.71* having [CVE-2023-33201|https://nvd.nist.gov/vuln/detail/CVE-2023-33201] 
from out classpath for the least.

As a follow up can try to bump to latest 9.4.x line, if others are fine with 
this. Please let me know what others think.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to