Introduced in 2.15.0

Bug Fixes

  • GH-618 Fix reading an OpenSshCertificate from a Buffer
  • GH-626 Enable Streaming.Async for ChannelDirectTcpip
  • GH-628 SFTP: fix reading directories with trailing blanks in the name
  • GH-636 Fix handling of unsupported key types in known_hosts file
  • GH-642 Do not use SecureRandom.getInstanceString() due to possible entropy starvation (regression in 2.14.0)
  • GH-654 Fix test dependency for assertj in sshd-contrib

New Features

  • GH-606 Support ML-KEM PQC hybrid key exchanges

  • GH-652 New method KnownHostsServerKeyVerifier.handleRevokedKey()

  • SSHD-988 Support ed25519 keys via the Bouncy Castle library

Potential compatibility issues

Major Code Re-factoring