Bug 2342851 - upgrade jsch to 0.2.23
Summary: upgrade jsch to 0.2.23
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: jsch
Version: 42
Hardware: Unspecified
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Markku Korkeala
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-01-29 19:54 UTC by Chris Cheney
Modified: 2025-09-17 10:58 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:
mizdebsk: mirror+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FC-2285 0 None None None 2025-09-17 10:58:31 UTC

Description Chris Cheney 2025-01-29 19:54:39 UTC
The original jsch upsteam appears to be dead and has not updated the program in 7 years. Fedora is still using this dead version instead of the current up to date fork.

So the original also hasn't kept up to date with ssh, and as the original upstream is dead its not clear if this might also be a potential security issue.


   http://www.jcraft.com/jsch/
   https://mvnrepository.com/artifact/com.jcraft/jsch

      0.1.55 - Nov 26, 2018

It was forked here and maintained for the past 5 years

   https://github.com/mwiede/jsch/releases
   https://github.com/mwiede/jsch

      0.2.23 - Jan 25, 2025
      0.1.58 - Jun 24, 2020


Reproducible: Always

Comment 1 Aoife Moloney 2025-02-26 13:49:35 UTC
This bug appears to have been reported against 'rawhide' during the Fedora Linux 42 development cycle.
Changing version to 42.

Comment 2 Markku Korkeala 2025-04-02 13:21:10 UTC
Hi, thanks for the bug report! As there is different author and groupId, I think it would probably be best to package this separately and then migrate using libraries and applications.


Note You need to log in before you can comment on or make changes to this bug.