Update bundled Apache Mina-sshd plugins (#7623)

Embed Apache mina sshd plugins 2.9.2 (common and core)

Update `sshd-common` plugin and `sshd-core` plugin from
2.9.1-44.v476733c11f82 to 2.9.2-50.va_0e1f42659a_a

Changelog

https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.2.md
links to http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45047
Unsafe deserialization in SimpleGeneratorHostKeyProvider

Jenkins core does not reference the SimpleGeneratorHostKeyProvider class.

It is referenced from sshd plugin at
https://github.com/jenkinsci/sshd-plugin/blob/251d59011530b4d3a4db4a3e6ee8f076c61c3bfe/src/main/java/org/jenkinsci/main/modules/sshd/SSHD.java#L162

Users can upgrade the plugin themselves during installation but it is
easier if we bundle the updated plugin version with new releases rather
than requiring that the user perform the update.
This commit is contained in:
Mark Waite authored and GitHub committed 2023-02-06 15:01:17 -07:00
1 parent 27358385b7
commit 31974d3c1a
1 file changed
+2 -2
+2 -2
View File
@@ -556,14 +556,14 @@ THE SOFTWARE.
<!-- dependency of mina-sshd-api-core -->
<groupId>io.jenkins.plugins.mina-sshd-api</groupId>
<artifactId>mina-sshd-api-common</artifactId>
<version>2.9.1-44.v476733c11f82</version>
<version>2.9.2-50.va_0e1f42659a_a</version>
<type>hpi</type>
</artifactItem>
<artifactItem>
<!-- dependency of sshd -->
<groupId>io.jenkins.plugins.mina-sshd-api</groupId>
<artifactId>mina-sshd-api-core</artifactId>
<version>2.9.1-44.v476733c11f82</version>
<version>2.9.2-50.va_0e1f42659a_a</version>
<type>hpi</type>
</artifactItem>
</artifactItems>