Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump sshd.version from 2.12.0 to 2.12.1 #991

Merged
merged 1 commit into from
May 22, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 21, 2024

Bumps sshd.version from 2.12.0 to 2.12.1.
Updates org.apache.sshd:sshd-common from 2.12.0 to 2.12.1

Release notes

Sourced from org.apache.sshd:sshd-common's releases.

Apache MINA SSHD 2.12.1

Introduced in 2.12.1

Bug Fixes

  • GH-458 Singleton thread pool for kex message handler flushing
  • SSHD-1338 Restore binary compatibility with 2.9.2

What's Changed

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.12.0...sshd-2.12.1

Changelog

Sourced from org.apache.sshd:sshd-common's changelog.

Version 2.11.0 to 2.12.0

Version 2.12.0 to 2.12.1

Planned for next version

Bug Fixes

  • GH-427 SCP client: fix DefaultScpClient.upload(InputStream, ...)

  • GH-455 Fix BaseCipher: make sure all bytes are processed

  • GH-470 MontgomeryCurve: synchronize access to KeyPairGenerator

  • GH-489 SFTP v3 client: better file type determination

  • GH-493 Fix arcfour128 and arcfour256 ciphers

  • GH-500 SFTP file system: fix memory leak on exceptions

  • GH-504 Pass through failure exception to SessionListener.sessionNegotiationEnd()

  • PR-472 sshd-spring-sftp: fix client start

  • PR-476 Fix Android detection

  • PR-486 Add missing equals and hashCode to U2F key classes

  • SSHD-1237 Handle keep-alive channel requests

New Features

  • The key exchange method [email protected] is now available if the Bouncy Castle library is available.

This uses a post-quantum key encapsulation method (KEM) to make key exchange future-proof against quantum attacks. More information can be found in IETF Memo Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512.

Behavioral changes and enhancements

  • GH-468 SFTP: validate length of data received: must not be more than requested

SFTP read operations now check the amount of data they get back. If it's more than requested an exception is thrown. SFTP servers must never return more data than the client requested, but it appears that there are some that do so. If property SftpModuleProperties.TOLERATE_EXCESS_DATA is set to true, a warning is logged and such excess data is silently discarded.

Potential compatibility issues

Major Code Re-factoring

Commits
  • 9ceba3e [maven-release-plugin] prepare release sshd-2.12.1
  • 1525fd3 Prepare changelog for release
  • 6c45997 Update CHANGES.md
  • 7d77e6d Use a singleton threadpool for kex message handler flushing (#459) (fixes #458)
  • 7498f7a Update CHANGES.md
  • 8744f06 [SSHD-1338] Restore binary compatibility with 2.9.2
  • 44a0b1b Bump jgit 5.13.0 -> 5.13.3
  • b040109 Merge pull request #454 from swiedenfeld/patch-1
  • c8be9b8 Fix link
  • 6511fb7 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.sshd:sshd-core from 2.12.0 to 2.12.1

Release notes

Sourced from org.apache.sshd:sshd-core's releases.

Apache MINA SSHD 2.12.1

Introduced in 2.12.1

Bug Fixes

  • GH-458 Singleton thread pool for kex message handler flushing
  • SSHD-1338 Restore binary compatibility with 2.9.2

What's Changed

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.12.0...sshd-2.12.1

Changelog

Sourced from org.apache.sshd:sshd-core's changelog.

Version 2.11.0 to 2.12.0

Version 2.12.0 to 2.12.1

Planned for next version

Bug Fixes

  • GH-427 SCP client: fix DefaultScpClient.upload(InputStream, ...)

  • GH-455 Fix BaseCipher: make sure all bytes are processed

  • GH-470 MontgomeryCurve: synchronize access to KeyPairGenerator

  • GH-489 SFTP v3 client: better file type determination

  • GH-493 Fix arcfour128 and arcfour256 ciphers

  • GH-500 SFTP file system: fix memory leak on exceptions

  • GH-504 Pass through failure exception to SessionListener.sessionNegotiationEnd()

  • PR-472 sshd-spring-sftp: fix client start

  • PR-476 Fix Android detection

  • PR-486 Add missing equals and hashCode to U2F key classes

  • SSHD-1237 Handle keep-alive channel requests

New Features

  • The key exchange method [email protected] is now available if the Bouncy Castle library is available.

This uses a post-quantum key encapsulation method (KEM) to make key exchange future-proof against quantum attacks. More information can be found in IETF Memo Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512.

Behavioral changes and enhancements

  • GH-468 SFTP: validate length of data received: must not be more than requested

SFTP read operations now check the amount of data they get back. If it's more than requested an exception is thrown. SFTP servers must never return more data than the client requested, but it appears that there are some that do so. If property SftpModuleProperties.TOLERATE_EXCESS_DATA is set to true, a warning is logged and such excess data is silently discarded.

Potential compatibility issues

Major Code Re-factoring

Commits
  • 9ceba3e [maven-release-plugin] prepare release sshd-2.12.1
  • 1525fd3 Prepare changelog for release
  • 6c45997 Update CHANGES.md
  • 7d77e6d Use a singleton threadpool for kex message handler flushing (#459) (fixes #458)
  • 7498f7a Update CHANGES.md
  • 8744f06 [SSHD-1338] Restore binary compatibility with 2.9.2
  • 44a0b1b Bump jgit 5.13.0 -> 5.13.3
  • b040109 Merge pull request #454 from swiedenfeld/patch-1
  • c8be9b8 Fix link
  • 6511fb7 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.sshd:sshd-scp from 2.12.0 to 2.12.1

Release notes

Sourced from org.apache.sshd:sshd-scp's releases.

Apache MINA SSHD 2.12.1

Introduced in 2.12.1

Bug Fixes

  • GH-458 Singleton thread pool for kex message handler flushing
  • SSHD-1338 Restore binary compatibility with 2.9.2

What's Changed

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.12.0...sshd-2.12.1

Changelog

Sourced from org.apache.sshd:sshd-scp's changelog.

Version 2.11.0 to 2.12.0

Version 2.12.0 to 2.12.1

Planned for next version

Bug Fixes

  • GH-427 SCP client: fix DefaultScpClient.upload(InputStream, ...)

  • GH-455 Fix BaseCipher: make sure all bytes are processed

  • GH-470 MontgomeryCurve: synchronize access to KeyPairGenerator

  • GH-489 SFTP v3 client: better file type determination

  • GH-493 Fix arcfour128 and arcfour256 ciphers

  • GH-500 SFTP file system: fix memory leak on exceptions

  • GH-504 Pass through failure exception to SessionListener.sessionNegotiationEnd()

  • PR-472 sshd-spring-sftp: fix client start

  • PR-476 Fix Android detection

  • PR-486 Add missing equals and hashCode to U2F key classes

  • SSHD-1237 Handle keep-alive channel requests

New Features

  • The key exchange method [email protected] is now available if the Bouncy Castle library is available.

This uses a post-quantum key encapsulation method (KEM) to make key exchange future-proof against quantum attacks. More information can be found in IETF Memo Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512.

Behavioral changes and enhancements

  • GH-468 SFTP: validate length of data received: must not be more than requested

SFTP read operations now check the amount of data they get back. If it's more than requested an exception is thrown. SFTP servers must never return more data than the client requested, but it appears that there are some that do so. If property SftpModuleProperties.TOLERATE_EXCESS_DATA is set to true, a warning is logged and such excess data is silently discarded.

Potential compatibility issues

Major Code Re-factoring

Commits
  • 9ceba3e [maven-release-plugin] prepare release sshd-2.12.1
  • 1525fd3 Prepare changelog for release
  • 6c45997 Update CHANGES.md
  • 7d77e6d Use a singleton threadpool for kex message handler flushing (#459) (fixes #458)
  • 7498f7a Update CHANGES.md
  • 8744f06 [SSHD-1338] Restore binary compatibility with 2.9.2
  • 44a0b1b Bump jgit 5.13.0 -> 5.13.3
  • b040109 Merge pull request #454 from swiedenfeld/patch-1
  • c8be9b8 Fix link
  • 6511fb7 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.sshd:sshd-sftp from 2.12.0 to 2.12.1

Release notes

Sourced from org.apache.sshd:sshd-sftp's releases.

Apache MINA SSHD 2.12.1

Introduced in 2.12.1

Bug Fixes

  • GH-458 Singleton thread pool for kex message handler flushing
  • SSHD-1338 Restore binary compatibility with 2.9.2

What's Changed

New Contributors

Full Changelog: apache/mina-sshd@sshd-2.12.0...sshd-2.12.1

Changelog

Sourced from org.apache.sshd:sshd-sftp's changelog.

Version 2.11.0 to 2.12.0

Version 2.12.0 to 2.12.1

Planned for next version

Bug Fixes

  • GH-427 SCP client: fix DefaultScpClient.upload(InputStream, ...)

  • GH-455 Fix BaseCipher: make sure all bytes are processed

  • GH-470 MontgomeryCurve: synchronize access to KeyPairGenerator

  • GH-489 SFTP v3 client: better file type determination

  • GH-493 Fix arcfour128 and arcfour256 ciphers

  • GH-500 SFTP file system: fix memory leak on exceptions

  • GH-504 Pass through failure exception to SessionListener.sessionNegotiationEnd()

  • PR-472 sshd-spring-sftp: fix client start

  • PR-476 Fix Android detection

  • PR-486 Add missing equals and hashCode to U2F key classes

  • SSHD-1237 Handle keep-alive channel requests

New Features

  • The key exchange method [email protected] is now available if the Bouncy Castle library is available.

This uses a post-quantum key encapsulation method (KEM) to make key exchange future-proof against quantum attacks. More information can be found in IETF Memo Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512.

Behavioral changes and enhancements

  • GH-468 SFTP: validate length of data received: must not be more than requested

SFTP read operations now check the amount of data they get back. If it's more than requested an exception is thrown. SFTP servers must never return more data than the client requested, but it appears that there are some that do so. If property SftpModuleProperties.TOLERATE_EXCESS_DATA is set to true, a warning is logged and such excess data is silently discarded.

Potential compatibility issues

Major Code Re-factoring

Commits
  • 9ceba3e [maven-release-plugin] prepare release sshd-2.12.1
  • 1525fd3 Prepare changelog for release
  • 6c45997 Update CHANGES.md
  • 7d77e6d Use a singleton threadpool for kex message handler flushing (#459) (fixes #458)
  • 7498f7a Update CHANGES.md
  • 8744f06 [SSHD-1338] Restore binary compatibility with 2.9.2
  • 44a0b1b Bump jgit 5.13.0 -> 5.13.3
  • b040109 Merge pull request #454 from swiedenfeld/patch-1
  • c8be9b8 Fix link
  • 6511fb7 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

updated-dependencies:
- dependency-name: org.apache.sshd:sshd-common
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.sshd:sshd-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.sshd:sshd-scp
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.sshd:sshd-sftp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 21, 2024
@gnodet gnodet merged commit daa72ae into master May 22, 2024
4 checks passed
@dependabot dependabot bot deleted the dependabot/maven/sshd.version-2.12.1 branch May 22, 2024 09:58
@gnodet gnodet added this to the 3.26.2 milestone Jun 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant