[NIFI-12631] Upgrade Apache MINA SSHD to 2.12.0

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M2
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 18/Jan/24 15:11
• Updated: 18/Jan/24 17:08
• Resolved: 18/Jan/24 17:08

Description

Apache MINA SSHD 2.12.0 includes several bug fixes, including support for strict key exchange to mitigate CVE-2023-48795.

MINA SSHD 2.12.0 is not compatible with JGit 5, so this upgrade only applies to the main branch for NiFi 2.0.0.

Issue Links

• links to: GitHub Pull Request #8265