diff options
| author | Thomas Wolf <twolf@apache.org> | 2024-01-12 21:23:47 +0100 |
|---|---|---|
| committer | Matthias Sohn <matthias.sohn@sap.com> | 2024-01-20 01:16:19 +0100 |
| commit | 18d0924a432f4654c7b4b2560d0acfedf6cea97c (patch) | |
| tree | 2a93bbc3660dc36e3c1f16404164edd0e1bfce05 /org.eclipse.jgit.packaging/org.eclipse.jgit.target/jgit-4.31.target | |
| parent | c4af3691225b5e43ec8059edeeddc6d913e948f6 (diff) | |
| download | jgit-18d0924a432f4654c7b4b2560d0acfedf6cea97c.tar.gz jgit-18d0924a432f4654c7b4b2560d0acfedf6cea97c.zip | |
[ssh] Bump Apache MINA sshd 2.11.0 -> 2.12.0
This includes the upstream fix for CVE-2023-48795[1] ("strict KEX"
protocol extension mitigating the "Terrapin attack"[2]) in JGit.
[1] https://nvd.nist.gov/vuln/detail/CVE-2023-48795
[2] https://www.terrapin-attack.com/
Bug: jgit-16
Change-Id: Ie9aa5b903ea6795bd1511afea0bebdb537b56148
Signed-off-by: Thomas Wolf <twolf@apache.org>
Diffstat (limited to 'org.eclipse.jgit.packaging/org.eclipse.jgit.target/jgit-4.31.target')
| -rw-r--r-- | org.eclipse.jgit.packaging/org.eclipse.jgit.target/jgit-4.31.target | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/org.eclipse.jgit.packaging/org.eclipse.jgit.target/jgit-4.31.target b/org.eclipse.jgit.packaging/org.eclipse.jgit.target/jgit-4.31.target index 7086e51315..e4ee40d7d6 100644 --- a/org.eclipse.jgit.packaging/org.eclipse.jgit.target/jgit-4.31.target +++ b/org.eclipse.jgit.packaging/org.eclipse.jgit.target/jgit-4.31.target @@ -1,7 +1,7 @@ <?xml version="1.0" encoding="UTF-8" standalone="no"?> <?pde?> <!-- generated with https://github.com/eclipse-cbi/targetplatform-dsl --> -<target name="jgit-4.31" sequenceNumber="1702682576"> +<target name="jgit-4.31" sequenceNumber="1705682994"> <locations> <location includeMode="slicer" includeAllPlatforms="false" includeSource="true" includeConfigurePhase="true" type="InstallableUnit"> <unit id="com.jcraft.jsch" version="0.1.55.v20230916-1400"/> @@ -63,13 +63,13 @@ <dependency> <groupId>org.apache.sshd</groupId> <artifactId>sshd-osgi</artifactId> - <version>2.11.0</version> + <version>2.12.0</version> <type>jar</type> </dependency> <dependency> <groupId>org.apache.sshd</groupId> <artifactId>sshd-sftp</artifactId> - <version>2.11.0</version> + <version>2.12.0</version> <type>jar</type> </dependency> </dependencies> |