[
https://issues.apache.org/jira/browse/MINIFICPP-2895?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ferenc Gerlits reassigned MINIFICPP-2895:
-----------------------------------------
Assignee: (was: Ferenc Gerlits)
> Upgrade the libssh2 dependency
> ------------------------------
>
> Key: MINIFICPP-2895
> URL: https://issues.apache.org/jira/browse/MINIFICPP-2895
> Project: Apache NiFi MiNiFi C++
> Issue Type: Improvement
> Reporter: Ferenc Gerlits
> Priority: Major
>
> The libssh2 dependency we use, version 1.11.1, is the latest release as of 3
> September 2026, but it is quite old: it was released in October 2024.
> If a new release comes out soon, we should upgrade to that. Otherwise we
> should still upgrade to the latest dev version on the master branch, because
> several high-severity CVEs have been found and fixed in libssh2 since the
> 1.11.1 release.
> Either way, we will need to upgrade our SFTPTestServer to use MINA 2.2.x
> (instead of the 2.1.0 it uses now), and regenerate the host and client keys
> used in the SFTP tests, because SHA1 key exchange is no longer supported by
> the newer versions of libssh2.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
