[jgit-dev] Vulnerability CVE-2023-48795

["Malyshkin, Denis" <dmalyshkin@xxxxxxxxxx>]

Hello all,

There is a new vulnerability -- https://nvd.nist.gov/vuln/detail/CVE-2023-48795

According to the list of the affected libraries, the "Apache MINA sshd through 2.11.0" library is also affected.

Does this vulnerability affect JGit and/or JGit users somehow?

If yes, do you have plans to update the Apache Mina library?  Do you have a ticket for this?

The corresponding Apache Mina ticket is still in progress yet -- https://github.com/apache/mina-sshd/issues/445

--

Best regards,
  Denis Malyshkin,
Senior C++ Developer
of ISS Art, Ltd., Omsk, Russia.
Mobile Phone: +7 913 669 2896
Office tel/fax +7 3812 396959
Yahoo Messenger: dmalyshkin
Web: http://www.issart.com

E-mail: dmalyshkin@xxxxxxxxxx