JRuby 1.7.16.2 has been released to address CVE-2014-8090. All users are encouraged to upgrade http://jruby.org/2014/12/08/jruby-1-7-16-2.html