This is an automated email from the ASF dual-hosted git repository.
tomaswolf pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mina-sshd.git
The following commit(s) were added to refs/heads/master by this push:
new 3cd153c7e Documentation updates
3cd153c7e is described below
commit 3cd153c7eb5a3de4ba0e9dcdf4edea5f08f0e255
Author: Thomas Wolf <[email protected]>
AuthorDate: Mon Aug 24 14:00:54 2026 +0200
Documentation updates
---
CHANGES.md | 2 ++
docs/changes/2.19.0.md | 11 +++++++----
2 files changed, 9 insertions(+), 4 deletions(-)
diff --git a/CHANGES.md b/CHANGES.md
index 2ffaf303d..4977c9048 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -33,7 +33,9 @@
## Bug Fixes
+* [GH-656](https://github.com/apache/mina-sshd/issues/656)
`ChannelPipedInputStream`: shrink buffer when emptied
* [GH-906](https://github.com/apache/mina-sshd/issues/906) Fix finding a
signature factory for BC ed25519 keys
+* [GH-911](https://github.com/apache/mina-sshd/issues/911) Fix server-side
SOCKS5 proxy for fragmented and pipelined CONNECT requests
## New Features
diff --git a/docs/changes/2.19.0.md b/docs/changes/2.19.0.md
index 4737eb3c4..1f15a4f80 100644
--- a/docs/changes/2.19.0.md
+++ b/docs/changes/2.19.0.md
@@ -5,11 +5,14 @@
* [GH-899](https://github.com/apache/mina-sshd/issues/899) Fix
`ProcessShellFactory` on Linux
* [GH-902](https://github.com/apache/mina-sshd/pull/902) Fix client-side
handling of sk-* public key signatures (also in the agent interfaces)
* Limit size of decompressed SSH packets
-* Improve checking SSH user certificates in public-key authentication
-* Improve handling of repository paths in `sshd-git` on Windows
-* Validate file names in SCP
* Escape newlines in filenames in the SCP protocol
-* Restrict JGit commands accessible via `GitPgmCommandFactory` in `sshd-git`
+
+** Security Fixes **
+
+* Validate file names in SCP. Resolves
[CVE-2026-56452](https://www.cve.org/CVERecord?id=CVE-2026-56452),
[announced](https://lists.apache.org/thread/xgoqvmksmd94fsqnzqjdtfjxf35os9no)
2026-07-20.
+* Improve handling of repository paths in `sshd-git` on Windows. Resolves
[CVE-2026-56623](https://www.cve.org/CVERecord?id=CVE-2026-56623),
[announced](https://lists.apache.org/thread/bhw26snzgvk0mtqqp5dcyjvczp4kcqky)
2026-07-20.
+* Improve checking SSH user certificates in public-key authentication.
Resolves [CVE-2026-56624](https://www.cve.org/CVERecord?id=CVE-2026-56624),
[announced](https://lists.apache.org/thread/o4c2jml522j3z80gbryqzc2f1253ltp6)
2026-07-20.
+* Restrict JGit commands accessible via `GitPgmCommandFactory` in `sshd-git`.
Resolves [CVE-2026-58624](https://www.cve.org/CVERecord?id=CVE-2026-58624),
[announced](https://lists.apache.org/thread/7c3cry6pdy6hj1q0f28rc72x4o4tlyjo)
2026-07-20.
## New Features
