Skip to content

NIFI-12257 Upgrade MINA SSHD from 2.9.2 to 2.9.3 for Support Branch#7914

Closed
exceptionfactory wants to merge 1 commit intoapache:support/nifi-1.xfrom
exceptionfactory:NIFI-12257
Closed

NIFI-12257 Upgrade MINA SSHD from 2.9.2 to 2.9.3 for Support Branch#7914
exceptionfactory wants to merge 1 commit intoapache:support/nifi-1.xfrom
exceptionfactory:NIFI-12257

Conversation

@exceptionfactory
Copy link
Copy Markdown
Contributor

Summary

NIFI-12257 Upgrades runtime Apache MINA SSHD dependencies in NiFi Registry from 2.9.2 to 2.9.3, maintaining compatibility with JGit 5.

Additional changes include upgrading MINA SSHD test dependencies for standard processors from 2.10.0 to 2.11.0.

This upgrade mitigates CVE-2023-35887, which applies to SFTP server implementations and is not directly applicable to transitive usage in NiFi Registry.

Tracking

Please complete the following tracking steps prior to pull request creation.

Issue Tracking

Pull Request Tracking

  • Pull Request title starts with Apache NiFi Jira issue number, such as NIFI-00000
  • Pull Request commit message starts with Apache NiFi Jira issue number, as such NIFI-00000

Pull Request Formatting

  • Pull Request based on current revision of the main branch
  • Pull Request refers to a feature branch with one commit containing changes

Verification

Please indicate the verification steps performed prior to pull request creation.

Build

  • Build completed using mvn clean install -P contrib-check
    • JDK 21

Licensing

  • New dependencies are compatible with the Apache License 2.0 according to the License Policy
  • New dependencies are documented in applicable LICENSE and NOTICE files

Documentation

  • Documentation formatting appears as expected in rendered files

- SSHD 2.9.3 applies to JGit 5 for Java 8
- Upgraded SSHD from 2.10.0 to 2.11.0 for test components
asfgit pushed a commit that referenced this pull request Oct 20, 2023
- SSHD 2.9.3 applies to JGit 5 for Java 8
- Upgraded SSHD from 2.10.0 to 2.11.0 for test components

Signed-off-by: Pierre Villard <pierre.villard.fr@gmail.com>

This closes #7914.
@pvillard31
Copy link
Copy Markdown
Contributor

Merged to support branch

@pvillard31 pvillard31 closed this Oct 20, 2023
@exceptionfactory exceptionfactory added the hacktoberfest-accepted Hacktoberfest Accepted label Oct 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

hacktoberfest-accepted Hacktoberfest Accepted

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants