Security update for apache-sshd, jpgpj

This update for apache-sshd, jpgpj fixes the following issues CVE-2020-36843: no check performed on scalar to avoid signature malleability bsc1239551. CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git bsc1267018. Changes for jpgpj: Initial packaging with v1.3 Changes f...

SUSE-SU-2026:2472-1 Security update for apache-sshd, jpgpj

This update for apache-sshd, jpgpj fixes the following issues - CVE-2020-36843: no check performed on scalar to avoid signature malleability bsc1239551. - CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git bsc1267018. Changes for jpgpj: - Initial packaging with v1.3...

apache-sshd-2.18.0-1.1 on GA media (moderate)

apache-sshd-2.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10919-1 Rating: moderate Cross-References: CVE-2020-36843 CVE-2026-48827 CVSS scores: CVE-2020-36843 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2020-36843 SUSE : 8.7...

org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m3) potentially affected by CVE-2026-48827 via org.apache.sshd:sshd-git (>=3.0.0-m1, <=3.0.0-m3)

org.apache.sshd:sshd-git MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m3 Source cves: CVE-2026-48827 Source advisory: SNYK:JAVA-ORGAPACHESSHD-17151844...

org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m3) potentially affected by CVE-2026-48827 via org.apache.sshd:sshd-git (>=3.0.0-m1, <=3.0.0-m3)

org.apache.sshd:sshd-git MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m3 Source cves: CVE-2026-48827 Source advisory: OSV:GHSA-MW4M-QHPG-J82M...

org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m3) potentially affected by CVE-2026-48827 via org.apache.sshd:sshd-git (>=3.0.0-m1, <=3.0.0-m3)

org.apache.sshd:sshd-git MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m3 Source cves: CVE-2026-48827 Source advisory: MEND:CVE-2026-48827...

OPENSUSE-SU-2026:10919-1 apache-sshd-2.18.0-1.1 on GA media

These are all security issues fixed in the apache-sshd-2.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

SUSE-SU-2024:0224-1 Security update for apache-parent, apache-sshd

This update for apache-parent, apache-sshd fixes the following issues: apache-parent was updated from version 28 to 31: - Version 31: New Features: + Added maven-checkstyle-plugin to pluginManagement Improvements: + Set minimalMavenBuildVersion to 3.6.3 - the minimum used by plugins + Using an SP...

Apache SSHD SimpleGeneratorHostKeyProvider Code Execution

The vulnerability of the org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider class in the Java library for supporting SSH protocol Apache SSHD is related to deserialization mechanism flaws. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

OESA-2022-2119 apache-sshd security update

Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fixes: Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD = 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The...

org.apache.felix.karaf.shell:org.apache.felix.karaf.shell.ssh (>=1.2.0, <=1.4.0), org.apache.felix.karaf:org.apache.felix.karaf.client (>=1.2.0, <=1.4.0) +5 more potentially affected by CVE-2022-45047 via org.apache.sshd:sshd-core (0.3.0)

org.apache.sshd:sshd-core MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sshd:sshd-core and may be impacted: - org.apache.felix.karaf.shell:org.apache.felix.karaf.shell.ssh =1.2.0, =1.2.0, =1.2.0, =1.0.0-beta5,...

org.apache.camel:camel-example-ssh (>=2.15.0, <=2.15.6), org.apache.camel:camel-example-ssh-security (>=2.15.0, <=2.15.6) +3 more potentially affected by CVE-2022-45047 via org.apache.sshd:sshd-core (0.13.0)

org.apache.sshd:sshd-core MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sshd:sshd-core and may be impacted: - org.apache.camel:camel-example-ssh =2.15.0, =2.15.0, =2.15.0, =2.15.6 - org.apache.sshd:apache-sshd 0.13.0 -...

org.apache.sshd:apache-sshd (1.1.1), org.apache.sshd:sshd-git (1.1.1) potentially affected by CVE-2022-45047 via org.apache.sshd:sshd-core (1.1.1)

org.apache.sshd:sshd-core MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sshd:sshd-core and may be impacted: - org.apache.sshd:apache-sshd 1.1.1 - org.apache.sshd:sshd-git 1.1.1 Source cves: CVE-2022-45047 Source advisor...

OESA-2021-1312 apache-sshd security update

Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fixes: A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding feature...