Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-14100

Upgrade Jsch jar to latest version to fix vulnerability in old versions

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • 2.7.3, 2.6.5
    • 2.9.0, 2.7.4, 3.0.0-alpha4, 2.8.2
    • None
    • None
    • Reviewed

    Description

      Recently there was on vulnerability reported on jsch library. Its fixed in latest 0.1.54 version before CVE was made public.
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5725

      So, need to upgrade jsch to latest 0.1.54 version.

      Attachments

        1. HADOOP-14100-branch-2.7.patch
          0.5 kB
          Brahma Reddy Battula
        2. HADOOP-14100-01.patch
          0.5 kB
          Vinayakumar B

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-15900 Update JSch versions in LICENSE.txt

          • Major - Major loss of function.
          • Resolved
          is depended upon by

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-9991 Fix up Hadoop POMs, roll up JARs to latest versions

          • Major - Major loss of function.
          • Open
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. HDFS-14309 name node fail over failed with ssh fence failed because of jsch login failed with key check

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-11515 Upgrade jsch lib to jsch-0.1.51 to avoid problems running on java7

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              vinayakumarb Vinayakumar B
              vinayakumarb Vinayakumar B
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: