[KARAF-7609] Upgrade to sshd 2.9.2

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.3.7, 4.4.1
• Fix Version/s: 4.4.3, 4.3.9
• Component/s: karaf
• Labels: dependency-upgrade
• Target Version/s: 4.4.3, 4.3.9
• Assignee: Jean-Baptiste Onofré
• Reporter: Karthick
• Created: 22/Nov/22 05:23
• Updated: 04/May/23 11:16
• Resolved: 18/Dec/22 15:20

Description

The latest version of Apache Karaf 4.3.8 and 4.4.2 uses Apache MINA SSHD 2.9.1 which is impacted by critical vulnerability cve-2022-45047.

 

Please stepup this library to > 2.9.1 to solve this.

Issue Links

• is blocked by: SSHD-1314 OpenSSHKeyPairProvider is not able to load SimpleKey