[jira] [Updated] (NIFI-12559) Upgrade SSHJ to 0.38.0

2024-01-02 Thread Matt Burgess (Jira)


 [ 
https://issues.apache.org/jira/browse/NIFI-12559?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Matt Burgess updated NIFI-12559:

Resolution: Fixed
Status: Resolved  (was: Patch Available)

> Upgrade SSHJ to 0.38.0
> --
>
> Key: NIFI-12559
> URL: https://issues.apache.org/jira/browse/NIFI-12559
> Project: Apache NiFi
>  Issue Type: Improvement
>  Components: Extensions
>Reporter: David Handermann
>Assignee: David Handermann
>Priority: Major
>  Labels: backport-needed
> Fix For: 1.25.0, 2.0.0
>
>  Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> SSHJ should be upgraded to version 
> [0.38.0|https://github.com/hierynomus/sshj#release-history] to incorporate 
> mitigations for the Terrapin vulnerability described in CVE-2023-48795, 
> applicable to SFTP Processors.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (NIFI-12559) Upgrade SSHJ to 0.38.0

2024-01-02 Thread David Handermann (Jira)


 [ 
https://issues.apache.org/jira/browse/NIFI-12559?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Handermann updated NIFI-12559:

Status: Patch Available  (was: Open)

> Upgrade SSHJ to 0.38.0
> --
>
> Key: NIFI-12559
> URL: https://issues.apache.org/jira/browse/NIFI-12559
> Project: Apache NiFi
>  Issue Type: Improvement
>  Components: Extensions
>Reporter: David Handermann
>Assignee: David Handermann
>Priority: Major
>  Labels: backport-needed
> Fix For: 1.25.0, 2.0.0
>
>  Time Spent: 10m
>  Remaining Estimate: 0h
>
> SSHJ should be upgraded to version 
> [0.38.0|https://github.com/hierynomus/sshj#release-history] to incorporate 
> mitigations for the Terrapin vulnerability described in CVE-2023-48795, 
> applicable to SFTP Processors.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (NIFI-12559) Upgrade SSHJ to 0.38.0

2024-01-02 Thread David Handermann (Jira)


 [ 
https://issues.apache.org/jira/browse/NIFI-12559?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

David Handermann updated NIFI-12559:

Summary: Upgrade SSHJ to 0.38.0  (was: Upgraded SSHJ to 0.38.0)

> Upgrade SSHJ to 0.38.0
> --
>
> Key: NIFI-12559
> URL: https://issues.apache.org/jira/browse/NIFI-12559
> Project: Apache NiFi
>  Issue Type: Improvement
>  Components: Extensions
>Reporter: David Handermann
>Assignee: David Handermann
>Priority: Major
>  Labels: backport-needed
> Fix For: 1.25.0, 2.0.0
>
>
> SSHJ should be upgraded to version 
> [0.38.0|https://github.com/hierynomus/sshj#release-history] to incorporate 
> mitigations for the Terrapin vulnerability described in CVE-2023-48795, 
> applicable to SFTP Processors.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)