Repository navigation
Apache Mina SSHD vulnerability in Keycloak (CVE-2021-30129) #11341
Answered
by
abstractj
montgomery-marcus-solute
asked this question in
Q&A
|
CVE-2021-30129 (https://nvd.nist.gov/vuln/detail/CVE-2021-30129) describes a vulnerability in Apache Mina SSHD that is fixed in Apache Mina SSHD version 2.7.0. Keycloak 17.0.1 uses Apache Mina SSHD version 2.3.0. Are there any plans to upgrade Apache Mina SSHD to at least 2.7.0? |
Answered by
abstractj
May 22, 2023
Replies: 1 comment 8 replies
|
There is actually another Issue with Minia SSH described in CVE-2022-45047 which affects 2.7.0 too. |
8 replies
|
wildfly on quarkus? |
|
I only know about quarkus. |
|
Have you found out any solution for that vulnerability? |
|
The issue was fixed a long time ago, the solution is to update to the latest release of Keycloak. See: https://github.com/keycloak/keycloak/issues?q=is%3Aissue+sort%3Aupdated-desc+Mina+SSHD+is%3Aclosed |
Answer selected by
abstractj
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The issue was fixed a long time ago, the solution is to update to the latest release of Keycloak. See: https://github.com/keycloak/keycloak/issues?q=is%3Aissue+sort%3Aupdated-desc+Mina+SSHD+is%3Aclosed