I'll start the release process tomorrow.
Guillaume
Le mar. 9 janv. 2024 à 20:43, Thomas Wolf a écrit :
> Could we have a new Apache MINA SSHD 2.12.0 release, please?
>
> There've been a few minor improvements, but the main reason
> for a new release is that we've implemented the "strict key
>
Could we have a new Apache MINA SSHD 2.12.0 release, please?
There've been a few minor improvements, but the main reason
for a new release is that we've implemented the "strict key
exchange" mitigation against the Terrapin attack
(CVE-2023-48795, which is a CVE against the SSH protocol
itself.)