Comments (3)
Thanks for the update and fast response. Much appreciated.
from asciidoctorj.
Issue #1141 which lists upgrading jruby to version 9.4.1.0, but that doesn't appear to be included in the latest release of 2.5.9.
That PR is for the main
branch which is targeting v3.0.0, version v2.5.9 is in branch v2.5.x
.
Is it possible to update to the latest version of jruby 9.4.2.0
Yes, I'll prepare a PR. No issue at all.
and re-issue a new version of asciidoctorj
That's to be confirmed. But checking the JRuby History, I see we are "affected" by https://nvd.nist.gov/vuln/detail/CVE-2022-38751. However, we do not do any yaml parsing, and as such the CVE could be dismissed in case that's an option in the meantime.
from asciidoctorj.
A new version of AsciidoctorJ with a more recent version of JRuby was released.
from asciidoctorj.
Related Issues (20)
- Integrate 'Coordinated Restore at Checkpoint' HOT 5
- Remove deprecated methods from Options and Attributes HOT 3
- Remove deprecated methods from Asciidoctor interface
- Remove deprecated methods from Document interface
- Remove deprecated methods from `extension` package
- Remove deprecated methods from `ast` package HOT 3
- release 3.0.0-alpha.1 is gravely incompatible with earlier releases HOT 11
- 'UnsupportedOperationException' when passing immutable Map as options to 'createPhraseNode' HOT 1
- Use always latest versions in distribution HOT 3
- Ensure AsciidoctorJ version is returned always in CLI
- exception containing itself as nested exception, causing maven endless loop HOT 7
- feature request: render asciidoc to markdown HOT 3
- -s CLI option should be changed to -e to align with Asciidoctor
- Automatic-Module-Name is undefined in MANIFEST file HOT 4
- CLI should set :mkdirs option by default HOT 7
- Custom Macro HOT 1
- setContext not exposed in API HOT 1
- Include processor with all attributes resolution HOT 2
- highlight.js version 9 used by AsciiDoctorJ needs update as it is out of support HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from asciidoctorj.