-
Task
-
Resolution: Done
-
Critical
-
8.0 Update 5
-
False
-
None
-
False
-
-
-
-
-
-
-
SSHD 2.9.3+ addresses CVE-2023-35887. We upgraded to this SSHD component version in EAP 7.4.14+ and SSHD 2.12.0 in EAP 8.0.1, but neglected at the time to also update Elytron's SSHD dependency, which is still at SSHD 2.9.2 for Elytron 1.15.x and 2.2.x.
- clones
-
ELY-2874 Upgrade Elytron 1.15.x and 2.2.x's SSHD dependency to 2.12.1
-
- Resolved
-
- is cloned by
-
JBEAP-29273 [8.1.0.GA] ELY-2874 - Upgrade Elytron 2.2.x's SSHD dependency to 2.12.1
-
- Verified
-
- is incorporated by
-
JBEAP-28961 (8.0.z) Upgrade Elytron from 2.2.7.Final-redhat-00001 to 2.2.8.Final-redhat-00001
-
- Ready for QA
-
- relates to
-
JBEAP-25627 (7.4.z) Upgrade SSHD from 2.9.2.redhat-00001 to 2.9.3.redhat-00001
-
- Closed
-
- links to
-
RHSA-2024:142322 Red Hat JBoss Enterprise Application Platform 8.0.7 security update
-
RHSA-2024:142323 Red Hat JBoss Enterprise Application Platform 8.0.7 security update
-
RHSA-2024:142324 Red Hat JBoss Enterprise Application Platform 8.0.7 security update
Hi chaowan@redhat.com, the commit will be merged to 2.2.x from 1.15.x I will add 2.2.x commit here once it will be done.