SUSE-SU-2024:0057-1
SUSE-SU-2024:0057-1 · Security update for eclipse-jgit, jsch
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for eclipse-jgit, jsch fixes the following issues: Security fix: - CVE-2023-4759: Fixed an arbitrary file overwrite which might have occurred with a specially crafted git repository and a case-insensitive filesystem. (bsc#1215298) Other fixes: jsch was updated to version 0.2.9: - Added support for various algorithms - Migrated from `com.jcraft:jsch` to `com.github.mwiede:jsch` fork (bsc#1211955): * Alias to the old artifact since the new one is drop-in replacement * Keep the old OSGi bundle symbolic name to avoid extensive patching of eclipse stack - Updated to version 0.2.9: * For the full list of changes please consult the upstream changelogs below for each version updated: + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.9 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.8 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.7 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.6 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.5 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.4 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.3 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.2 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.1 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.0 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.71 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.70 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.69 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.68 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.67 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.66 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.65 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.64 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.63 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.62 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.61 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.60 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.59 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.58 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.57 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.56 eclipse-jgit: - Craft the jgit script from the real Main class of the jar file instead of using a jar launcher (bsc#1209646)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
jsch SUSE:Linux Enterprise Module for Development Tools 15 SP4
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Linux Enterprise Module for Development Tools 15 SP5
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Manager Server Module 4.3
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Linux Enterprise Server 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Linux Enterprise Server 15 SP3-LTSS
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Linux Enterprise Server for SAP Applications 15 SP3
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
jsch SUSE:Enterprise Storage 7.1
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
eclipse-jgit openSUSE:Leap 15.4
- Affected ranges
- ECOSYSTEM: < 5.11.0-150200.3.15.2
Update to 5.11.0-150200.3.15.2
jgit openSUSE:Leap 15.4
- Affected ranges
- ECOSYSTEM: < 5.11.0-150200.3.15.2
Update to 5.11.0-150200.3.15.2
jsch openSUSE:Leap 15.4
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1
eclipse-jgit openSUSE:Leap 15.5
- Affected ranges
- ECOSYSTEM: < 5.11.0-150200.3.15.2
Update to 5.11.0-150200.3.15.2
jsch openSUSE:Leap 15.5
- Affected ranges
- ECOSYSTEM: < 0.2.9-150200.11.10.1
Update to 0.2.9-150200.11.10.1