You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Executable files distributed with JRuby have incorrect PE details #59
The Portable Executable (PE) data in those files is incorrect.
If we extract the PE data from the files (I used peres from the pev package on Debian) I get
ProductName JRuby
ProductVersion 1.0
I'm not sure I would call those JRuby as they are launchers, but that's something I'll let you all figure out :)
But the version is certainly incorrect
This was found while working with the Syft SBOM scanner. It parses PE metadata to extract names and versions. This results in an SBOM that shows version 1.0 of JRuby being present.
Environment Information
Linux (but this affects all environments)
Provide at least:
JRuby version (jruby -v) and command line (flags, JRUBY_OPTS, etc)
Operating system and platform (e.g. uname -a)
./jruby -v
jruby 10.0.2.0 (3.4.2) 2025-08-07 cba6031bd0 OpenJDK 64-Bit Server VM 21.0.9+10 on 21.0.9+10 +indy +jit [x86_64-linux]
Expected Behavior
I would expect PE data that looks something like
Thank you for the report! Those launchers are pretty old now and we are discussing replacement options, but this will be something to look for whatever solution we come up with. I am going to move this issue over to that repository.
Activity
headius commentedon Nov 13, 2025
Thank you for the report! Those launchers are pretty old now and we are discussing replacement options, but this will be something to look for whatever solution we come up with. I am going to move this issue over to that repository.