-
Component Upgrade
-
Resolution: Unresolved
-
Critical
-
7.4.20.GA
-
None
-
False
-
None
-
False
-
-
-
-
-
-
-
SSHD 2.9.3+ addresses CVE-2023-35887. We upgraded to this SSHD component version in EAP 7.4.14+ and SSHD 2.12.0 in EAP 8.0.1, but neglected at the time to also update Elytron's SSHD dependency, which is still at SSHD 2.9.2 for Elytron 1.15.x and 2.2.x.
- clones
-
ELY-2874 Upgrade Elytron 1.15.x and 2.2.x's SSHD dependency to 2.12.1
-
- Pull Request Sent
-
- relates to
-
JBEAP-25627 (7.4.z) Upgrade SSHD from 2.9.2.redhat-00001 to 2.9.3.redhat-00001
-
- Closed
-
- links to
-
RHSA-2025:144440 Red Hat JBoss Enterprise Application Platform 7.4.22 security update
-
RHSA-2025:144441 Red Hat JBoss Enterprise Application Platform 7.4.22 security update
-
RHSA-2025:144442 Red Hat JBoss Enterprise Application Platform 7.4.22 security update
-
RHSA-2025:144443 Red Hat JBoss Enterprise Application Platform 7.4.22 security update