dev  

Messages by Thread

• CVE-2026-94029: Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension Thomas Wolf
• CVE-2026-94002: Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies Thomas Wolf
• CVE-2026-93996: Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read Thomas Wolf
• CVE-2026-93995: Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server Thomas Wolf
• CVE-2026-93994: Apache MINA SSHD: Repeated-publickey policy bypass on server Thomas Wolf
• CVE-2026-77185: Apache MINA SSHD: Asynchronous authentication can bypass signature verification Thomas Wolf
• [PR] Bump ant.version from 1.10.15 to 1.10.18 [mina-sshd] via GitHub
• [PR] Bump pmd.version from 7.22.0 to 7.28.0 [mina-sshd] via GitHub
• [PR] Bump com.github.mwiede:jsch from 2.28.3 to 2.28.7 [mina-sshd] via GitHub
• [PR] Bump testcontainers.version from 1.21.3 to 2.0.5 [mina-sshd] via GitHub
• [PR] Bump grpc.version from 1.79.0 to 1.84.0 [mina-sshd] via GitHub
• [ANNOUNCE] Apache MINA SSHD 3.0.0-M6 released Thomas Wolf
• [ANNOUNCE] Apache MINA SSHD 2.20.0 released Thomas Wolf
• [PR] DIRMINA-1030 - MdcInjectionFilterTest - allow only selected filter names to be processed [mina] via GitHub
  • Re: [PR] DIRMINA-1030 - MdcInjectionFilterTest - allow only selected filter names to be processed [mina] via GitHub
• [jira] [Work logged] (DIRMINA-1030) MdcInjectionFilterTest randomly fail ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1030) MdcInjectionFilterTest randomly fail ASF GitHub Bot (Jira)
• [jira] [Commented] (DIRMINA-1030) MdcInjectionFilterTest randomly fail Marcin Lamparski (Jira)
  • [jira] [Commented] (DIRMINA-1030) MdcInjectionFilterTest randomly fail Marcin Lamparski (Jira)
  • [jira] [Commented] (DIRMINA-1030) MdcInjectionFilterTest randomly fail Jira
• [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
  • Re: [PR] `AbstractBindTest` - retry available port bind [mina] via GitHub
• [PR] Bump com.google.protobuf:protobuf-java from 3.16.3 to 3.25.5 in /protobuf [mina] via GitHub
• [PR] Bump org.apache.logging.log4j:log4j-core from 2.1 to 2.25.4 in /core [mina] via GitHub
• [PR] Bump org.apache.avro:avro from 1.7.4 to 1.11.4 in /avro [mina] via GitHub
• Shoudl we maintain 2.0.X and 2.1.X branches? Emmanuel Lécharny
  • Re: Shoudl we maintain 2.0.X and 2.1.X branches? Gary Gregory
  • Re: Shoudl we maintain 2.0.X and 2.1.X branches? jgenender
  • Re: Shoudl we maintain 2.0.X and 2.1.X branches? Arnaud bourree
  • Re: Shoudl we maintain 2.0.X and 2.1.X branches? Marcin Lamparski
  • Re: Shoudl we maintain 2.0.X and 2.1.X branches? Emmanuel Lécharny
• [PR] filtering MDC events from IoProcessor log [mina] via GitHub
  • Re: [PR] MdcInjectionFilterTest - added additional event filtering [mina] via GitHub
  • Re: [PR] MdcInjectionFilterTest - added additional event filtering [mina] via GitHub
• [PR] `MdcInjectionFilterTest` - added additional event filtering [mina] via GitHub
  • Re: [PR] `MdcInjectionFilterTest` - added additional event filtering [mina] via GitHub
  • Re: [PR] `MdcInjectionFilterTest` - added additional event filtering [mina] via GitHub
  • Re: [PR] `MdcInjectionFilterTest` - added additional event filtering [mina] via GitHub
  • Re: [PR] `MdcInjectionFilterTest` - added additional event filtering [mina] via GitHub
  • Re: [PR] `MdcInjectionFilterTest` - added additional event filtering [mina] via GitHub
  • Re: [PR] `MdcInjectionFilterTest` - added additional event filtering [mina] via GitHub
• [PR] fix: cancel pending channel writes [mina-sshd] via GitHub
  • Re: [PR] fix: cancel pending channel writes [mina-sshd] via GitHub
  • Re: [PR] fix: cancel pending channel writes [mina-sshd] via GitHub
  • Re: [PR] fix: cancel pending channel writes [mina-sshd] via GitHub
  • Re: [PR] fix: cancel pending channel writes [mina-sshd] via GitHub
  • Re: [PR] fix: cancel pending channel writes [mina-sshd] via GitHub
• [PR] DIRMINA777Test fix [mina] via GitHub
  • Re: [PR] DIRMINA777Test fix [mina] via GitHub
• [PR] SslIdentificationAlgorithmTest - do not resolve DNS for custom hostnames [mina] via GitHub
  • Re: [PR] SslIdentificationAlgorithmTest - do not resolve DNS for custom hostnames [mina] via GitHub
  • Re: [PR] SslIdentificationAlgorithmTest - do not resolve DNS for custom hostnames [mina] via GitHub
  • Re: [PR] SslIdentificationAlgorithmTest - do not resolve DNS for custom hostnames [mina] via GitHub
  • Re: [PR] SslIdentificationAlgorithmTest - do not resolve DNS for custom hostnames [mina] via GitHub
• CVE-2026-47321: Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate Emmanuel Lécharny
• [PR] fixing flaky AbstractFileRegionTest failures due to byte alignment [mina] via GitHub
  • Re: [PR] Flaky AbstractFileRegionTest failures due to byte alignment [mina] via GitHub
  • Re: [PR] Flaky AbstractFileRegionTest failures due to byte alignment [mina] via GitHub
• [PR] Document the object serialization format change in IoBuffer.putObject/getObject [mina] via GitHub
  • Re: [PR] Document the object serialization format change in IoBuffer.putObject/getObject [mina] via GitHub
  • Re: [PR] Document the object serialization format change in IoBuffer.putObject/getObject [mina] via GitHub
  • Re: [PR] Document the object serialization format change in IoBuffer.putObject/getObject [mina] via GitHub
  • Re: [PR] Document the object serialization format change in IoBuffer.putObject/getObject [mina] via GitHub
  • Re: [PR] Document the object serialization format change in IoBuffer.putObject/getObject [mina] via GitHub
• [jira] [Updated] (DIRMINA-1201) Adding logs in AbstractPollingIoProcessor break a MDC test Jira
• [jira] [Created] (DIRMINA-1201) Adding logs in AbstractPollingIoProcessor break a MDC test Jira
• [jira] [Commented] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests Jira
• [PR] [DIRMINA-1146] Additional unit test checks [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Additional unit test checks [mina] via GitHub
• [jira] [Resolved] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests Jira
• [I] Data point: what a PQ signature and host-key migration would touch in sshd, from a static scan of 2.19.0 [mina-sshd] via GitHub
  • Re: [I] Data point: what a PQ signature and host-key migration would touch in sshd, from a static scan of 2.19.0 [mina-sshd] via GitHub
• [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
  • [jira] [Work logged] (DIRMINA-1146) TLS enabled session got disconnected when outbound messages add up to the value of maxscheduledwriterequests ASF GitHub Bot (Jira)
• [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
  • Re: [PR] [DIRMINA-1146] Pass message to next filter in SslFilter [mina] via GitHub
• [PR] Bump org.apache.thrift:libthrift from 0.14.0 to 0.24.0 in /thrift [mina] via GitHub
• [I] userauth_passwd: parse packet: invalid format when password length >= 20 chars [mina-sshd] via GitHub
  • Re: [I] userauth_passwd: parse packet: invalid format when password length >= 20 chars [mina-sshd] via GitHub
  • Re: [I] userauth_passwd: parse packet: invalid format when password length >= 20 chars [mina-sshd] via GitHub
• [PR] GH-656: shrink ChannelPipedInputStream buffer after all data is read [mina-sshd] via GitHub
  • Re: [PR] GH-656: shrink ChannelPipedInputStream buffer after all data is read [mina-sshd] via GitHub
  • Re: [PR] GH-656: shrink ChannelPipedInputStream buffer after all data is read [mina-sshd] via GitHub
• [PR] Fix SOCKS5 dynamic forwarding of fragmented and pipelined requests [mina-sshd] via GitHub
  • Re: [PR] Fix SOCKS5 dynamic forwarding of fragmented and pipelined requests [mina-sshd] via GitHub
  • Re: [PR] Fix SOCKS5 dynamic forwarding of fragmented and pipelined requests [mina-sshd] via GitHub
• [I] `SocksProxy` mishandles fragmented and pipelined CONNECT requests and corrupts the reply [mina-sshd] via GitHub
  • Re: [I] `SocksProxy` mishandles fragmented and pipelined CONNECT requests and corrupts the reply [mina-sshd] via GitHub
• [jira] [Comment Edited] (DIRMINA-1200) Avoid creating useless reception buffers when using TLS Jira
• [jira] [Updated] (DIRMINA-1200) Avoid creating useless reception buffers when using TLS Jira
• [jira] [Commented] (DIRMINA-1200) Avoid creating useless reception buffers when using TLS Jira
  • [jira] [Commented] (DIRMINA-1200) Avoid creating useless reception buffers when using TLS Jira
  • [jira] [Commented] (DIRMINA-1200) Avoid creating useless reception buffers when using TLS Jira
  • [jira] [Commented] (DIRMINA-1200) Avoid creating useless reception buffers when using TLS Jira
• [jira] [Commented] (DIRMINA-1190) Get rid of jmock/easymock/rmock in favor of Mockito Gary D. Gregory (Jira)
  • [jira] [Commented] (DIRMINA-1190) Get rid of jmock/easymock/rmock in favor of Mockito Jira
  • [jira] [Commented] (DIRMINA-1190) Get rid of jmock/easymock/rmock in favor of Mockito Marcin Lamparski (Jira)
• [jira] [Created] (DIRMINA-1200) Avoid creating useless reception buffers when using TLS Jira
• [jira] [Comment Edited] (DIRMINA-1199) Still having issue when dealing with TLS exchanges Jira
  • [jira] [Comment Edited] (DIRMINA-1199) Still having issue when dealing with TLS exchanges Jira
• [jira] [Created] (SSHD-1353) SSH_MSG_KEXINIT sent first with SEND_IMMEDIATE_KEXINIT=false Yuefeng (Jira)
• [PR] GH-909: Fix KexOutputHandler self-deadlock on inline write failure during shutdown [mina-sshd] via GitHub
  • Re: [PR] GH-909: Fix KexOutputHandler self-deadlock on inline write failure during shutdown [mina-sshd] via GitHub
  • Re: [PR] GH-909: Fix KexOutputHandler self-deadlock on inline write failure during shutdown [mina-sshd] via GitHub
  • Re: [PR] GH-909: Fix KexOutputHandler self-deadlock on inline write failure during shutdown [mina-sshd] via GitHub
• [I] KexOutputHandler self-deadlock: illegal read-to-write lock upgrade during session shutdown on an inline write failure [mina-sshd] via GitHub
  • Re: [I] KexOutputHandler self-deadlock: illegal read-to-write lock upgrade during session shutdown on an inline write failure [mina-sshd] via GitHub
  • Re: [I] KexOutputHandler self-deadlock: illegal read-to-write lock upgrade during session shutdown on an inline write failure [mina-sshd] via GitHub
  • Re: [I] KexOutputHandler self-deadlock: illegal read-to-write lock upgrade during session shutdown on an inline write failure [mina-sshd] via GitHub
  • Re: [I] KexOutputHandler self-deadlock: illegal read-to-write lock upgrade during session shutdown on an inline write failure [mina-sshd] via GitHub
• CVE-2026-58624: Apache MINA SSHD: Remote execution of JGit commands can write files on the server Thomas Wolf
• CVE-2026-56624: Apache MINA SSHD: SSH certificate options lack validations Thomas Wolf
• CVE-2026-56623: Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on Windows Thomas Wolf
• CVE-2026-56452: Apache MINA SSHD: Path traversal in SCP file reception Thomas Wolf
• [ANNOUNCE] Apache MINA SSHD 3.0.0-M5 released Thomas Wolf
• [ANNOUNCE] Apache MINA SSHD 2.19.0 released Thomas Wolf
• [I] Github release for 2.19.0 version [mina-sshd] via GitHub
  • Re: [I] Github release for 2.19.0 version [mina-sshd] via GitHub
  • Re: [I] Github release for 2.19.0 version [mina-sshd] via GitHub
  • Re: [I] Github release for 2.19.0 version [mina-sshd] via GitHub
  • Re: [I] Github release for 2.19.0 version [mina-sshd] via GitHub
• [PR] GH-905 Implement authorized_keys from and expiry-time checks [mina-sshd] via GitHub
  • Re: [PR] GH-905 Implement authorized_keys from and expiry-time checks [mina-sshd] via GitHub
  • Re: [PR] GH-905 Implement authorized_keys from and expiry-time checks [mina-sshd] via GitHub
  • Re: [PR] GH-905 Implement authorized_keys from and expiry-time checks [mina-sshd] via GitHub
• [I] AgentImpl cannot sign BouncyCastle BCEdDSAPublicKey (Ed25519) during SSH Agent Forwarding on Android [mina-sshd] via GitHub
  • Re: [I] Agent forwarding fails with BouncyCastle Ed25519 keys (BCEdDSAPublicKey) - No signer found [mina-sshd] via GitHub
  • Re: [I] Agent forwarding fails with BouncyCastle Ed25519 keys (BCEdDSAPublicKey) - No signer found [mina-sshd] via GitHub
  • Re: [I] Agent forwarding fails with BouncyCastle Ed25519 keys (BCEdDSAPublicKey) - No signer found [mina-sshd] via GitHub
  • Re: [I] Agent forwarding fails with BouncyCastle Ed25519 keys (BCEdDSAPublicKey) - No signer found [mina-sshd] via GitHub
• [I] Implement more checks in AuthorizedKeyEntriesPublickeyAuthenticator [mina-sshd] via GitHub
  • Re: [I] Implement more checks in AuthorizedKeyEntriesPublickeyAuthenticator [mina-sshd] via GitHub
• Apache MINA 2.1.15 and 2.0.31 released Emmanuel Lecharny
• [I] Impossible to correlate logs from NIO worker threads [mina-sshd] via GitHub
  • Re: [I] Impossible to correlate logs from NIO worker threads [mina-sshd] via GitHub
  • Re: [I] Impossible to correlate logs from NIO worker threads [mina-sshd] via GitHub
  • Re: [I] Impossible to correlate logs from NIO worker threads [mina-sshd] via GitHub
  • Re: [I] Impossible to correlate logs from NIO worker threads [mina-sshd] via GitHub
  • Re: [I] Impossible to correlate logs from NIO worker threads [mina-sshd] via GitHub
  • Re: [I] Impossible to correlate logs from NIO worker threads [mina-sshd] via GitHub
  • Re: [I] Impossible to correlate logs from NIO worker threads [mina-sshd] via GitHub
• [Vote] Apache MINA 2.1.15 and 2.0.31 Emmanuel Lecharny
  • Re: [Vote] Apache MINA 2.1.15 and 2.0.31 Gary Gregory
  • Re: [Vote] Apache MINA 2.1.15 and 2.0.31 Emmanuel Lecharny
  • Re: [Vote] Apache MINA 2.1.15 and 2.0.31 Gary Gregory
  • Re: [Vote] Apache MINA 2.1.15 and 2.0.31 Jeff Genender via dev
  • Re: [Vote] Apache MINA 2.1.15 and 2.0.31 Thomas Wolf
  • Re: [Vote] Apache MINA 2.1.15 and 2.0.31 Emmanuel Lecharny
  • Re: [Vote] Apache MINA 2.1.15 and 2.0.31 Thomas Wolf
  • Re: [Vote] Apache MINA 2.1.15 and 2.0.31 Emmanuel Lécharny
• [jira] [Commented] (DIRMINA-1199) Still having issue when dealing with TLS exchanges Jira
  • [jira] [Commented] (DIRMINA-1199) Still having issue when dealing with TLS exchanges Jira
  • [jira] [Commented] (DIRMINA-1199) Still having issue when dealing with TLS exchanges Marcin Lamparski (Jira)
  • [jira] [Commented] (DIRMINA-1199) Still having issue when dealing with TLS exchanges Marcin Lamparski (Jira)

• Earlier messages
• Later messages