[WFCORE-6676] CVE-2023-48795 Upgrade Apache Mina SSHD to 2.12.0

[TomasHofman]

https://issues.redhat.com/browse/WFCORE-6676

Resolves CVE-2023-48795 / apache/mina-sshd#445

[wildfly-ci]

Core -> Full Integration Build 13430 outcome was FAILURE using a merge of d74b7b8
Summary: Exit code 1 (Step: Build & test full (Maven)) Build time: 00:02:08

[wildfly-ci]

Core -> Full Integration Build 13191 outcome was FAILURE using a merge of d74b7b8
Summary: Exit code 1 (Step: Build & test full (Maven)) Build time: 00:02:10

[wildfly-ci]

Core -> WildFly Preview Integration Build 13254 outcome was FAILURE using a merge of d74b7b8
Summary: Exit code 1 (Step: Build & test full (Maven)) Build time: 00:02:13

[TomasHofman]

Hello @yersan , is there something wrong with the full integration tests? They fail with following, which I think is not caused by the changes in the commit:

[ERROR] [ERROR] Some problems were encountered while processing the POMs:

[12:52:21 ](https://ci.wildfly.org/buildConfiguration/WildFlyCore_PullRequest_GalleonWildFlyCoreFullIntegrationLinuxJdk11/413516?buildTab=log&focusLine=11552&linesState=11552&logView=flowAware)
  [ERROR] Non-resolvable import POM: Could not find artifact org.wildfly.core:wildfly-core-parent:pom:23.0.0.Final-SNAPSHOT in local-mirror (http://nexus.wildfly.int/nexus/repository/public/) @ line 563, column 25

[12:52:21 ](https://ci.wildfly.org/buildConfiguration/WildFlyCore_PullRequest_GalleonWildFlyCoreFullIntegrationLinuxJdk11/413516?buildTab=log&focusLine=11553&linesState=11553&logView=flowAware)
   @

[12:52:21 ](https://ci.wildfly.org/buildConfiguration/WildFlyCore_PullRequest_GalleonWildFlyCoreFullIntegrationLinuxJdk11/413516?buildTab=log&focusLine=11554&linesState=11554&logView=flowAware)
  [ERROR] The build could not read 1 project -> [Help 1]

[12:52:21 ](https://ci.wildfly.org/buildConfiguration/WildFlyCore_PullRequest_GalleonWildFlyCoreFullIntegrationLinuxJdk11/413516?buildTab=log&focusLine=11555&linesState=11555&logView=flowAware)
  [ERROR]

[12:52:21 ](https://ci.wildfly.org/buildConfiguration/WildFlyCore_PullRequest_GalleonWildFlyCoreFullIntegrationLinuxJdk11/413516?buildTab=log&focusLine=11556&linesState=11556&logView=flowAware)
  [ERROR]   The project org.wildfly:wildfly-parent:31.0.0.Final-SNAPSHOT (/opt/buildAgent/work/e8e0dd9c7c4ba60/full/pom.xml) has 1 error

[12:52:21 ](https://ci.wildfly.org/buildConfiguration/WildFlyCore_PullRequest_GalleonWildFlyCoreFullIntegrationLinuxJdk11/413516?buildTab=log&focusLine=11557&linesState=11557&logView=flowAware)
  [ERROR]     Non-resolvable import POM: Could not find artifact org.wildfly.core:wildfly-core-parent:pom:23.0.0.Final-SNAPSHOT in local-mirror (http://nexus.wildfly.int/nexus/repository/public/) @ line 563, column 25 -> [Help 2]

[12:52:21 ](https://ci.wildfly.org/buildConfiguration/WildFlyCore_PullRequest_GalleonWildFlyCoreFullIntegrationLinuxJdk11/413516?buildTab=log&focusLine=11558&linesState=11558&logView=flowAware)
  [ERROR]

[yersan]

Hi @TomasHofman , you caught the WildFly Core repo in the middle of a release with the CI Jobs not updated yet. They are already modified, so it is just a matter of kicking them off again. CI is going pretty slow to me now, but I'll kick them later

[TomasHofman]

That's great @yersan , thanks for info! :)

[yersan]

@TomasHofman Done, let's see how they go.

In case you want to know when they are in progress, you can check this Zulip stream where we advertise when we are releasing: https://wildfly.zulipchat.com/#narrow/stream/274477-Pull-requests/topic/WildFly.20Core.20Release

[yersan]

@TomasHofman we are going to need another PR for 23.x branch

[TomasHofman]

@yersan I only need it in main and 21.0.x (for EAP).

[yersan]

@TomasHofman no problem, it is more a matter of getting the CVE resolved for all current releases upstream and unrelated to the product. I've backported it to 23.x

[yersan]

Thanks @TomasHofman

[TomasHofman]

Thanks @yersan !