hierynomus / sshj

ssh, scp and sftp for java
Apache License 2.0
2.46k stars 594 forks source link

Does CVE-2023-48795 affect sshj ? #919

Closed BadTrasher closed 6 months ago

BadTrasher commented 6 months ago

Does CVE-2023-48795 affect sshj ? If so, which versions are affected and how to solve it?

dkocher commented 6 months ago

Duplicate for #916.

hierynomus commented 6 months ago

It's fixed with 0.38.0 which is now being built and released.

BadTrasher commented 6 months ago

It's fixed with 0.38.0 which is now being built and released.

Where can i get the jar package of 0.38.0

hierynomus commented 6 months ago

All releases are available on Maven Central... https://mvnrepository.com/artifact/com.hierynomus/sshj/0.38.0