diff options
| author | David Ostrovsky <david@ostrovsky.org> | 2022-04-26 06:59:44 +0200 |
|---|---|---|
| committer | Nasser Grainawi <nasser.grainawi@linaro.org> | 2023-01-07 12:56:30 -0700 |
| commit | 952d4889d3b59d6d00c3f8dcff69dbc2f84af297 (patch) | |
| tree | defeb0daf4195e09e69a2b7be3046bf255f5e605 | |
| parent | e807990710ff83e089027b8d6f7a5c18990152d9 (diff) | |
Bump sshd version to 2.9.2
This change updates sshd-core dependency to 2.9.2, which fixes
CVE-2022-45047 [1]. It also includes this bug fix likely applicable to
Gerrit:
* [SSHD-1302] - Reading again from exhausted ChannelExec#getInvertedOut()
throws IOException instead of returning -1
Also update mina-core to 2.0.23 which includes several bug fixes.
[1] https://nvd.nist.gov/vuln/detail/CVE-2022-45047
Release-Notes: Bump sshd version to 2.9.2
Change-Id: If8ba2c83b2c2110643c2dc4c4b95a96da0c5bd31
| -rw-r--r-- | tools/nongoogle.bzl | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/tools/nongoogle.bzl b/tools/nongoogle.bzl index 39413564ba..a6f4c675b3 100644 --- a/tools/nongoogle.bzl +++ b/tools/nongoogle.bzl @@ -65,18 +65,18 @@ def declare_nongoogle_deps(): sha1 = "cb2f351bf4463751201f43bb99865235d5ba07ca", ) - SSHD_VERS = "2.9.1" + SSHD_VERS = "2.9.2" maven_jar( name = "sshd-osgi", artifact = "org.apache.sshd:sshd-osgi:" + SSHD_VERS, - sha1 = "9ed1a653da98a1aabe3ae092ee8310299718e914", + sha1 = "bac0415734519b2fe433fea196017acf7ed32660", ) maven_jar( name = "sshd-sftp", artifact = "org.apache.sshd:sshd-sftp:" + SSHD_VERS, - sha1 = "6d01cb8138e60e97e3de08e96cc5a094c8ce2cac", + sha1 = "7f9089c87b3b44f19998252fd3b68637e3322920", ) maven_jar( @@ -87,14 +87,14 @@ def declare_nongoogle_deps(): maven_jar( name = "mina-core", - artifact = "org.apache.mina:mina-core:2.0.21", - sha1 = "e1a317689ecd438f54e863747e832f741ef8e092", + artifact = "org.apache.mina:mina-core:2.0.23", + sha1 = "391228b25d3a24434b205444cd262780a9ea61e7", ) maven_jar( name = "sshd-mina", artifact = "org.apache.sshd:sshd-mina:" + SSHD_VERS, - sha1 = "5ab797b99630bb0c3e9ebcd8a3a6cad46408a79a", + sha1 = "765dced3a2b4069bb0c550e18bda057bad8de26f", ) maven_jar( |