Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Security update for jruby-9.4 and related packages
published 9 months ago
Summary
A security issue affects jruby-9.4, jruby-9.4-default-ruby, ruby-3.2 and 5 more (Chainguard). The advisory does not describe the issue in detail. Update to 9.4.13.0-r1 or later. See the linked advisory for details.
What to do
- Update chainguard jruby-9.4 to version 9.4.13.0-r1.
- Update chainguard jruby-9.4-default-ruby to version 9.4.13.0-r1.
- Update chainguard ruby-3.2 to version 3.2.8-r3.
- Update chainguard ruby-3.2-dev to version 3.2.8-r3.
- Update chainguard ruby-3.2-doc to version 3.2.8-r3.
- Update chainguard ruby-3.4 to version 3.4.5-r0.
- Update chainguard ruby-3.4-dev to version 3.4.5-r0.
- Update chainguard ruby-3.4-doc to version 3.4.5-r0.
- Update wolfi jruby-9.4 to version 9.4.13.0-r1.
- Update wolfi jruby-9.4-default-ruby to version 9.4.13.0-r1.
- Update wolfi ruby-3.2 to version 3.2.8-r3.
- Update wolfi ruby-3.2-dev to version 3.2.8-r3.
- Update wolfi ruby-3.2-doc to version 3.2.8-r3.
- Update wolfi ruby-3.4 to version 3.4.5-r0.
- Update wolfi ruby-3.4-dev to version 3.4.5-r0.
- Update wolfi ruby-3.4-doc to version 3.4.5-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | jruby-9.4 |
< 9.4.13.0-r1 Fix: upgrade to 9.4.13.0-r1
|
| Chainguard | chainguard | jruby-9.4-default-ruby |
< 9.4.13.0-r1 Fix: upgrade to 9.4.13.0-r1
|
| Chainguard | chainguard | ruby-3.2 |
< 3.2.8-r3 Fix: upgrade to 3.2.8-r3
|
| Chainguard | chainguard | ruby-3.2-dev |
< 3.2.8-r3 Fix: upgrade to 3.2.8-r3
|
| Chainguard | chainguard | ruby-3.2-doc |
< 3.2.8-r3 Fix: upgrade to 3.2.8-r3
|
| Chainguard | chainguard | ruby-3.4 |
< 3.4.5-r0 Fix: upgrade to 3.4.5-r0
|
| Chainguard | chainguard | ruby-3.4-dev |
< 3.4.5-r0 Fix: upgrade to 3.4.5-r0
|
| Chainguard | chainguard | ruby-3.4-doc |
< 3.4.5-r0 Fix: upgrade to 3.4.5-r0
|
| Wolfi | wolfi | jruby-9.4 |
< 9.4.13.0-r1 Fix: upgrade to 9.4.13.0-r1
|
| Wolfi | wolfi | jruby-9.4-default-ruby |
< 9.4.13.0-r1 Fix: upgrade to 9.4.13.0-r1
|
| Wolfi | wolfi | ruby-3.2 |
< 3.2.8-r3 Fix: upgrade to 3.2.8-r3
|
| Wolfi | wolfi | ruby-3.2-dev |
< 3.2.8-r3 Fix: upgrade to 3.2.8-r3
|
| Wolfi | wolfi | ruby-3.2-doc |
< 3.2.8-r3 Fix: upgrade to 3.2.8-r3
|
| Wolfi | wolfi | ruby-3.4 |
< 3.4.5-r0 Fix: upgrade to 3.4.5-r0
|
| Wolfi | wolfi | ruby-3.4-dev |
< 3.4.5-r0 Fix: upgrade to 3.4.5-r0
|
| Wolfi | wolfi | ruby-3.4-doc |
< 3.4.5-r0 Fix: upgrade to 3.4.5-r0
|
Original advisory text
CGA-6785-c33m-x6p8
Timeline
Published29 Jan 2026
Updated27 May 2026
First seen27 May 2026
Sources
CGA-6785-c33m-x6p8 · OSV
Track software like this
Free during beta