[NIFI-12559] Upgrade SSHJ to 0.38.0

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.25.0, 2.0.0-M2
• Component/s: Extensions
• Labels: backport-needed
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 02/Jan/24 15:48
• Updated: 02/Jan/24 18:50
• Resolved: 02/Jan/24 18:50

Description

SSHJ should be upgraded to version 0.38.0 to incorporate mitigations for the Terrapin vulnerability described in CVE-2023-48795, applicable to SFTP Processors.

Issue Links

• links to: GitHub Pull Request #8200