This is an automated email from the ASF dual-hosted git repository.
twolf pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mina-site.git
The following commit(s) were added to refs/heads/master by this push:
new 12338e704 Publish SSHD 2.17.0
12338e704 is described below
commit 12338e704fbd97dbcfa390978eb1985090d5eacf
Author: Thomas Wolf <[email protected]>
AuthorDate: Wed Jan 21 23:26:03 2026 +0100
Publish SSHD 2.17.0
---
config.toml | 2 +-
source/downloads-sshd.md | 1 +
source/sshd-project/download_2.17.0.md | 52 ++++++++++++++++++++++++++++++++++
source/sshd-project/downloads.md | 1 +
4 files changed, 55 insertions(+), 1 deletion(-)
diff --git a/config.toml b/config.toml
index c5579772d..0a676b09a 100644
--- a/config.toml
+++ b/config.toml
@@ -45,5 +45,5 @@ version_mina_2_1 = "2.1.10"
version_mina_2_2 = "2.2.5"
version_ftpserver_1_1 = "1.1.4"
version_ftpserver_1_2 = "1.2.1"
-version_sshd = "2.16.0"
+version_sshd = "2.17.0"
version_vysper = "0.7"
diff --git a/source/downloads-sshd.md b/source/downloads-sshd.md
index fa2d6b17e..ffcec6592 100644
--- a/source/downloads-sshd.md
+++ b/source/downloads-sshd.md
@@ -67,3 +67,4 @@ You can [build](./sshd-project/building.html) the latest
version from [sources](
* [SSHD 2.14.0](./sshd-project/download_2.14.0.html)
* [SSHD 2.15.0](./sshd-project/download_2.15.0.html)
* [SSHD 2.16.0](./sshd-project/download_2.16.0.html)
+* [SSHD 2.17.0](./sshd-project/download_2.17.0.html)
diff --git a/source/sshd-project/download_2.17.0.md
b/source/sshd-project/download_2.17.0.md
new file mode 100644
index 000000000..af1212724
--- /dev/null
+++ b/source/sshd-project/download_2.17.0.md
@@ -0,0 +1,52 @@
+---
+type: sshd
+title: Apache SSHD 2.17.0 Release
+version: 2.17.0
+---
+
+# Overview
+
+## Bug Fixes
+
+Github issues:
+
+* [GH-469](https://github.com/apache/mina-sshd/issues/469) AKA
[SSHD-897](https://issues.apache.org/jira/browse/SSHD-897) Fix duplicate
character echo with interactive shells
+* [GH-721](https://github.com/apache/mina-sshd/issues/721) SSH client:
schedule session timeout checks on demand only
+* [GH-807](https://github.com/apache/mina-sshd/issues/807) Handle "verified"
flag for sk-* keys
+* [GH-809](https://github.com/apache/mina-sshd/pull/809) Fix server-side
authentication for FIDO/U2F sk-* keys with flags in `authorized_keys`
+* [GH-827](https://github.com/apache/mina-sshd/issues/827) Don't fail on
invalid `known_hosts` lines; log and skip them
+* [GH-830](https://github.com/apache/mina-sshd/issues/830) EC public keys: let
Bouncy Castle generate X.509 encodings with the curve OID as algorithm parameter
+* [GH-855](https://github.com/apache/mina-sshd/issues/855) SFTP: use a single
`SftpClient` per `SftpFileSystem`
+* [GH-856](https://github.com/apache/mina-sshd/issues/856) Fix using ed25519
with BC-FIPS
+* [GH-861](https://github.com/apache/mina-sshd/issues/861) SFTP client:
prevent sending zero-length writes in `SftpOutputStreamAsync`
+
+JIRA issues:
+
+* [SSHD-897](https://issues.apache.org/jira/browse/SSHD-897) AKA
[GH-469](https://github.com/apache/mina-sshd/issues/469) Fix duplicate
character echo with interactive shells
+* [SSHD-1348](https://issues.apache.org/jira/browse/SSHD-1348) Fix zero-length
SFTP reads
+* [SSHD-1349](https://issues.apache.org/jira/browse/SSHD-1349) Bump PMD to
7.20.0 to avoid StackOverflowError when compiling on Java 26-ea
+
+## New Features
+
+* [GH-814](https://github.com/apache/mina-sshd/pull/814) Include a fix for
CVE-2020-36843 in optional dependency net.i2p.crypto:eddsa:0.3.0: perform the
missing range check in Apache MINA SSHD before delegating to the signature
verification in net.i2p.crypto:eddsa:0.3.0. This means that using
net.i2p.crypto:eddsa:0.3.0 in Apache MINA SSHD is safe despite that CVE in the
dependency.
+* [GH-865](https://github.com/apache/mina-sshd/issues/865) replace `%h` in
`HostName` SSH config
+
+## Potential Compatibility Issues
+
+[GH-855](https://github.com/apache/mina-sshd/issues/855) changes the way
`SftpFileSystem` deals with multiple threads. It newly uses a single SSH
channel via a single thread-safe `SftpClient`, serializing writes at the
channel level. The properties relating to the previously used pool of
`SftpClient`s have been deprecated and have no effect anymore. User
applications using the library should not see any changes.
+
+A beneficial side-effect of this change is that an `SftpFileSystem` creates
the SSH session and SFTP channel only when the first SFTP operation is
performed. Previously the session and channel were opened right away when an
`SftpFileSystem` was instantiated.
+
+# Getting the Distributions
+
+
+* Source distributions:
+ * [Apache Mina SSHD {{< version >}} Sources
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}-src.tar.gz)
[PGP](https://www.apache.org/dist/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}-src.tar.gz.asc) [SHA512](https://www.apache.org/dist/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}-src.tar.gz.sha512)
+ * [Apache Mina SSHD {{< version >}} Sources
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}-src.zip)
[PGP](https://www.apache.org/dist/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}-src.zip.asc) [SHA512](https://www.apache.org/dist/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}-src.zip.sha512)
+* Binary distributions:
+ * [Apache Mina SSHD {{< version >}} Binary
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}.tar.gz)
[PGP](https://www.apache.org/dist/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}.tar.gz.asc) [SHA512](https://www.apache.org/dist/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}.tar.gz.sha512)
+ * [Apache Mina SSHD {{< version >}} Binary
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}.zip)
[PGP](https://www.apache.org/dist/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}.zip.asc) [SHA512](https://www.apache.org/dist/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}.zip.sha512)
+
+PGP signing public keys for all releases are available in the [Apache MINA
KEYS file](https://downloads.apache.org/mina/KEYS).
+
+Please report any feedback to
[[email protected]](mailto:[email protected]).
diff --git a/source/sshd-project/downloads.md b/source/sshd-project/downloads.md
index 738c8215e..102485d50 100644
--- a/source/sshd-project/downloads.md
+++ b/source/sshd-project/downloads.md
@@ -70,4 +70,5 @@ You can [build](building.html) the latest version from
[sources](sources.html).
* [SSHD 2.14.0](./download_2.14.0.html)
* [SSHD 2.15.0](./download_2.15.0.html)
* [SSHD 2.16.0](./download_2.16.0.html)
+* [SSHD 2.17.0](./download_2.17.0.html)
