Ferenc Gerlits created MINIFICPP-2895:
-----------------------------------------
Summary: Upgrade the libssh2 dependency
Key: MINIFICPP-2895
URL: https://issues.apache.org/jira/browse/MINIFICPP-2895
Project: Apache NiFi MiNiFi C++
Issue Type: Improvement
Reporter: Ferenc Gerlits
Assignee: Ferenc Gerlits
The libssh2 dependency we use, version 1.11.1, is the latest release as of 3
September 2026, but it is quite old: it was released in October 2024.
If a new release comes out soon, we should upgrade to that. Otherwise we should
still upgrade to the latest dev version on the master branch, because several
high-severity CVEs have been found and fixed in libssh2 since the 1.11.1
release.
Either way, we will need to upgrade our SFTPTestServer to use MINA 2.2.x
(instead of the 2.1.0 it uses now), and regenerate the host and client keys
used in the SFTP tests, because SHA1 key exchange is no longer supported by the
newer versions of libssh2.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
