Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apache-sshd for openSUSE:Factory checked in at 2026-07-21 23:12:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apache-sshd (Old) and /work/SRC/openSUSE:Factory/.apache-sshd.new.24530 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apache-sshd" Tue Jul 21 23:12:24 2026 rev:14 rq:1366970 version:2.19.0 Changes: -------- --- /work/SRC/openSUSE:Factory/apache-sshd/apache-sshd.changes 2026-06-01 18:08:06.108497190 +0200 +++ /work/SRC/openSUSE:Factory/.apache-sshd.new.24530/apache-sshd.changes 2026-07-21 23:12:34.326752806 +0200 @@ -1,0 +2,18 @@ +Tue Jul 21 13:05:26 UTC 2026 - Fridrich Strba <[email protected]> + +- Update to upstream version 2.19.0 + * Bug Fixes + + GH-899 Fix ProcessShellFactory on Linux + + GH-902 Fix client-side handling of sk-* public key signatures + (also in the agent interfaces) + + Limit size of decompressed SSH packets + + Improve checking SSH user certificates in public-key + authentication (CVE-2026-56624, bsc#1271992) + + Improve handling of repository paths in sshd-git on Windows + (CVE-2026-56623, bsc#1271993) + + Validate file names in SCP + + Escape newlines in filenames in the SCP protocol + + Restrict JGit commands accessible via GitPgmCommandFactory in + sshd-git (CVE-2026-58624, bsc#1271991) + +------------------------------------------------------------------- Old: ---- apache-sshd-2.18.0-src.tar.gz New: ---- apache-sshd-2.19.0-src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apache-sshd.spec ++++++ --- /var/tmp/diff_new_pack.6f49Qj/_old 2026-07-21 23:12:35.362788233 +0200 +++ /var/tmp/diff_new_pack.6f49Qj/_new 2026-07-21 23:12:35.366788369 +0200 @@ -23,7 +23,7 @@ %bcond_with extras %endif %global homedir %{_datadir}/apache-sshd -Version: 2.18.0 +Version: 2.19.0 Release: 0 Summary: Apache SSHD # One file has ISC licensing: ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.6f49Qj/_old 2026-07-21 23:12:35.414790011 +0200 +++ /var/tmp/diff_new_pack.6f49Qj/_new 2026-07-21 23:12:35.418790148 +0200 @@ -1,6 +1,6 @@ -mtime: 1780303389 -commit: 1af456002354ec8cebeab6fb2a724484c97b310075df147eecf8cdba4cf46818 +mtime: 1784639850 +commit: 39ef7e62619c979a3228f2db43e0cd69a60b53f3e204ca5acd719a1727377419 url: https://src.opensuse.org/java-packages/apache-sshd -revision: 1af456002354ec8cebeab6fb2a724484c97b310075df147eecf8cdba4cf46818 +revision: 39ef7e62619c979a3228f2db43e0cd69a60b53f3e204ca5acd719a1727377419 projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj ++++++ apache-sshd-2.18.0-src.tar.gz -> apache-sshd-2.19.0-src.tar.gz ++++++ ++++ 2539 lines of diff (skipped) ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-21 15:17:30.000000000 +0200 @@ -0,0 +1 @@ +.osc
