[SSHD-1141] DefaultClientKexExtensionHandler: ensure list is modifiable
diff --git a/sshd-core/src/main/java/org/apache/sshd/common/kex/extension/DefaultClientKexExtensionHandler.java b/sshd-core/src/main/java/org/apache/sshd/common/kex/extension/DefaultClientKexExtensionHandler.java
index 19a0324..a22996b 100644
--- a/sshd-core/src/main/java/org/apache/sshd/common/kex/extension/DefaultClientKexExtensionHandler.java
+++ b/sshd-core/src/main/java/org/apache/sshd/common/kex/extension/DefaultClientKexExtensionHandler.java
@@ -129,7 +129,7 @@
         // Client determines order; server says what it supports. Re-order such that supported ones are
         // at the front, in client order, followed by unsupported ones, also in client order.
         if (serverAlgorithms != null && !serverAlgorithms.isEmpty()) {
-            List<NamedFactory<Signature>> clientAlgorithms = session.getSignatureFactories();
+            List<NamedFactory<Signature>> clientAlgorithms = new ArrayList<>(session.getSignatureFactories());
             if (log.isDebugEnabled()) {
                 log.debug("handleServerSignatureAlgorithms({}): PubkeyAcceptedAlgorithms before: {}", //$NON-NLS-1$
                         session, clientAlgorithms);