Edtftpj-pro-7.40 Please let me know OpenSSH and bouncy castle and jZlib versions used in 7.4.0 jar

Question

Edtftpj-pro-7.40 version we are using like licence one. Please  let me know OpenSSH and bouncy castle and jZlib versions used in 7.4.0 jar

We have internal BDH (security binary) scan. While scanning its highlighting vulnerability in below pkg 

com.enterprisedt.net.j2ssh.openssh

Please response as soon as possible. based on that we will take a decision to purchase if fix is available in latest release jar. 

Answer 1

edtFTPj/PRO generally does not use OpenSSH as it is a Java-based library, and OpenSSH is a separate SFTP/SSH server and client suite typically used in Unix-like systems. I will let you know the bouncy castle version once i get that information.