dependabot[bot] opened a new pull request, #1383: URL: https://github.com/apache/maven-scm/pull/1383
Bumps `minaSshdVersion` from 2.18.0 to 2.19.0. Updates `org.apache.sshd:sshd-git` from 2.18.0 to 2.19.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/releases";>org.apache.sshd:sshd-git's releases</a>.</em></p> <blockquote> <h2>Apache MINA SSHD 2.19.0</h2> <h2>Bug Fixes</h2> <ul> <li><a href="https://redirect.github.com/apache/mina-sshd/issues/899";>GH-899</a> Fix <code>ProcessShellFactory</code> on Linux</li> <li><a href="https://redirect.github.com/apache/mina-sshd/pull/902";>GH-902</a> Fix client-side handling of sk-* public key signatures (also in the agent interfaces)</li> <li>Limit size of decompressed SSH packets</li> <li>Improve checking SSH user certificates in public-key authentication</li> <li>Improve handling of repository paths in <code>sshd-git</code> on Windows</li> <li>Validate file names in SCP</li> <li>Escape newlines in filenames in the SCP protocol</li> <li>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></li> </ul> <h2>Potential Compatibility Issues</h2> <h3>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></h3> <p>Bundle <code>sshd-git</code> contains a <code>GitPgmCommandFactory</code> that can be configured for an Apache MINA SSHD server. It enables remote execution of git commands via JGit.</p> <p>However, running arbitrary git commands remotely is an exotic use case, and some commands (like <code>git archive --format zip --output somefile.zip</code> or also <code>git clone</code> or <code>git checkout</code>) could even create files on the server. This should be only allowed in an OS-level chrooted environment, which Apache MINA SSHD does not and cannot provide.</p> <p>We have therefore limited the available commands to a small set of whitelisted git commands that might be useful as maintenance commands for authorized power users on a git server implemented based on <code>sshd-git</code>. The command are: <code>archive</code>, <code>blame</code>, <code>branch</code>, <code>describe</code>, <code>diff</code>, <code>gc</code>, <code>log</code>, <code>reflog</code>, <code>show</code>, and <code>status</code>. All these commands can be executed from an client via <code>git --git-dir <repo> <command> <args></code>, where <code><repo></code> is the server-side name of the git repository (its local path on the server relative to the configured root), <code><command></code> is the command name (e.g., <code>archive</code>) and <code><args></code> are the command arguments. Results are sent back via the command output streams (output or error streams) and are thus sent back to the client. For the <code>archive</code>command, the <code>--output</code> (or <code>-o</code>) argument is ignored; the archive is always returned via the command's output stream and this is also sent to the client.</p> <p>Applications that might have relied on the ability to run other JGit command remotely may no longer work. Either implement your own dedicated command factory to enable accesss to certain commands, or set the property <code>GitModuleProperties.RESTRICT_COMMANDS</code> to <code>false</code> on the server-side <code>SshServer</code> (for all sessions) or on particular <code>ServerSession</code>s (for particular individual sessions) to re-enable access to <em>all</em> commands supported by JGit.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/blob/master/CHANGES.md";>org.apache.sshd:sshd-git's changelog</a>.</em></p> <blockquote> <h1>Previous Versions</h1> <ul> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.2.0.md";>Version 2.1.0 to 2.2.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.3.0.md";>Version 2.2.0 to 2.3.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.4.0.md";>Version 2.3.0 to 2.4.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.0.md";>Version 2.4.0 to 2.5.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.1.md";>Version 2.5.0 to 2.5.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.6.0.md";>Version 2.5.1 to 2.6.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.7.0.md";>Version 2.6.0 to 2.7.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.8.0.md";>Version 2.7.0 to 2.8.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.0.md";>Version 2.8.0 to 2.9.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.1.md";>Version 2.9.0 to 2.9.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.2.md";>Version 2.9.1 to 2.9.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.10.0.md";>Version 2.9.2 to 2.10.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.11.0.md";>Version 2.10.0 to 2.11.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.0.md";>Version 2.11.0 to 2.12.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.1.md";>Version 2.12.0 to 2.12.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.0.md";>Version 2.12.1 to 2.13.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.1.md";>Version 2.13.0 to 2.13.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.2.md";>Version 2.13.1 to 2.13.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.14.0.md";>Version 2.13.2 to 2.14.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.15.0.md";>Version 2.14.0 to 2.15.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.16.0.md";>Version 2.15.0 to 2.16.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.0.md";>Version 2.16.0 to 2.17.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.1.md";>Version 2.17.0 to 2.17.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.18.0.md";>Version 2.17.1 to 2.18.0</a></li> </ul> <h1>Latest Version</h1> <ul> <li><strong><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.19.0.md";>Version 2.18.0 to 2.19.0</a></strong></li> </ul> <h1>Planned for Next Version</h1> <h2>Bug Fixes</h2> <h2>New Features</h2> <h2>Potential Compatibility Issues</h2> <h2>Major Code Re-factoring</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/mina-sshd/commit/e2926a2795fb099fa0ad6e72e788b812dda256c6";><code>e2926a2</code></a> [maven-release-plugin] prepare release sshd-2.19.0</li> <li><a href="https://github.com/apache/mina-sshd/commit/49e4408d8ea628f507cda35b02a6423142dcfd32";><code>49e4408</code></a> Prepare release documentation</li> <li><a href="https://github.com/apache/mina-sshd/commit/8caed36abcd4836f5e4ecbd63b679c9a51128905";><code>8caed36</code></a> Bump dependency to org.apache.mina:mina-core</li> <li><a href="https://github.com/apache/mina-sshd/commit/e94075277a3c1d5847f7a396cd4be8cab5650c04";><code>e940752</code></a> Fix copy-paste error in a test</li> <li><a href="https://github.com/apache/mina-sshd/commit/3a93226cb7e7a7cf7d1af9790b2be80275ef82f2";><code>3a93226</code></a> UTF8 fix in NOTICE-bin.txt</li> <li><a href="https://github.com/apache/mina-sshd/commit/3f036c581a6ee88847b8348407891b4f4dcf4de5";><code>3f036c5</code></a> Restrict remote execution of git commands</li> <li><a href="https://github.com/apache/mina-sshd/commit/a792e08922482894db080dd791c112623ed42601";><code>a792e08</code></a> SCP: escape newlines in file names on sending</li> <li><a href="https://github.com/apache/mina-sshd/commit/400626e1af4f329052a49851437485b272147fc4";><code>400626e</code></a> Update CHANGES.md</li> <li><a href="https://github.com/apache/mina-sshd/commit/ab3672f03161cd9f5f7d622bff0335e513c9994d";><code>ab3672f</code></a> SCP: validate filenames</li> <li><a href="https://github.com/apache/mina-sshd/commit/384de9e3a0d5be1e30842142473fb86b9194c879";><code>384de9e</code></a> Update CHANGES.md</li> <li>Additional commits viewable in <a href="https://github.com/apache/mina-sshd/compare/sshd-2.18.0...sshd-2.19.0";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.sshd:sshd-common` from 2.18.0 to 2.19.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/releases";>org.apache.sshd:sshd-common's releases</a>.</em></p> <blockquote> <h2>Apache MINA SSHD 2.19.0</h2> <h2>Bug Fixes</h2> <ul> <li><a href="https://redirect.github.com/apache/mina-sshd/issues/899";>GH-899</a> Fix <code>ProcessShellFactory</code> on Linux</li> <li><a href="https://redirect.github.com/apache/mina-sshd/pull/902";>GH-902</a> Fix client-side handling of sk-* public key signatures (also in the agent interfaces)</li> <li>Limit size of decompressed SSH packets</li> <li>Improve checking SSH user certificates in public-key authentication</li> <li>Improve handling of repository paths in <code>sshd-git</code> on Windows</li> <li>Validate file names in SCP</li> <li>Escape newlines in filenames in the SCP protocol</li> <li>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></li> </ul> <h2>Potential Compatibility Issues</h2> <h3>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></h3> <p>Bundle <code>sshd-git</code> contains a <code>GitPgmCommandFactory</code> that can be configured for an Apache MINA SSHD server. It enables remote execution of git commands via JGit.</p> <p>However, running arbitrary git commands remotely is an exotic use case, and some commands (like <code>git archive --format zip --output somefile.zip</code> or also <code>git clone</code> or <code>git checkout</code>) could even create files on the server. This should be only allowed in an OS-level chrooted environment, which Apache MINA SSHD does not and cannot provide.</p> <p>We have therefore limited the available commands to a small set of whitelisted git commands that might be useful as maintenance commands for authorized power users on a git server implemented based on <code>sshd-git</code>. The command are: <code>archive</code>, <code>blame</code>, <code>branch</code>, <code>describe</code>, <code>diff</code>, <code>gc</code>, <code>log</code>, <code>reflog</code>, <code>show</code>, and <code>status</code>. All these commands can be executed from an client via <code>git --git-dir <repo> <command> <args></code>, where <code><repo></code> is the server-side name of the git repository (its local path on the server relative to the configured root), <code><command></code> is the command name (e.g., <code>archive</code>) and <code><args></code> are the command arguments. Results are sent back via the command output streams (output or error streams) and are thus sent back to the client. For the <code>archive</code>command, the <code>--output</code> (or <code>-o</code>) argument is ignored; the archive is always returned via the command's output stream and this is also sent to the client.</p> <p>Applications that might have relied on the ability to run other JGit command remotely may no longer work. Either implement your own dedicated command factory to enable accesss to certain commands, or set the property <code>GitModuleProperties.RESTRICT_COMMANDS</code> to <code>false</code> on the server-side <code>SshServer</code> (for all sessions) or on particular <code>ServerSession</code>s (for particular individual sessions) to re-enable access to <em>all</em> commands supported by JGit.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/blob/master/CHANGES.md";>org.apache.sshd:sshd-common's changelog</a>.</em></p> <blockquote> <h1>Previous Versions</h1> <ul> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.2.0.md";>Version 2.1.0 to 2.2.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.3.0.md";>Version 2.2.0 to 2.3.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.4.0.md";>Version 2.3.0 to 2.4.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.0.md";>Version 2.4.0 to 2.5.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.1.md";>Version 2.5.0 to 2.5.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.6.0.md";>Version 2.5.1 to 2.6.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.7.0.md";>Version 2.6.0 to 2.7.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.8.0.md";>Version 2.7.0 to 2.8.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.0.md";>Version 2.8.0 to 2.9.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.1.md";>Version 2.9.0 to 2.9.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.2.md";>Version 2.9.1 to 2.9.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.10.0.md";>Version 2.9.2 to 2.10.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.11.0.md";>Version 2.10.0 to 2.11.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.0.md";>Version 2.11.0 to 2.12.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.1.md";>Version 2.12.0 to 2.12.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.0.md";>Version 2.12.1 to 2.13.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.1.md";>Version 2.13.0 to 2.13.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.2.md";>Version 2.13.1 to 2.13.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.14.0.md";>Version 2.13.2 to 2.14.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.15.0.md";>Version 2.14.0 to 2.15.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.16.0.md";>Version 2.15.0 to 2.16.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.0.md";>Version 2.16.0 to 2.17.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.1.md";>Version 2.17.0 to 2.17.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.18.0.md";>Version 2.17.1 to 2.18.0</a></li> </ul> <h1>Latest Version</h1> <ul> <li><strong><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.19.0.md";>Version 2.18.0 to 2.19.0</a></strong></li> </ul> <h1>Planned for Next Version</h1> <h2>Bug Fixes</h2> <h2>New Features</h2> <h2>Potential Compatibility Issues</h2> <h2>Major Code Re-factoring</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/mina-sshd/commit/e2926a2795fb099fa0ad6e72e788b812dda256c6";><code>e2926a2</code></a> [maven-release-plugin] prepare release sshd-2.19.0</li> <li><a href="https://github.com/apache/mina-sshd/commit/49e4408d8ea628f507cda35b02a6423142dcfd32";><code>49e4408</code></a> Prepare release documentation</li> <li><a href="https://github.com/apache/mina-sshd/commit/8caed36abcd4836f5e4ecbd63b679c9a51128905";><code>8caed36</code></a> Bump dependency to org.apache.mina:mina-core</li> <li><a href="https://github.com/apache/mina-sshd/commit/e94075277a3c1d5847f7a396cd4be8cab5650c04";><code>e940752</code></a> Fix copy-paste error in a test</li> <li><a href="https://github.com/apache/mina-sshd/commit/3a93226cb7e7a7cf7d1af9790b2be80275ef82f2";><code>3a93226</code></a> UTF8 fix in NOTICE-bin.txt</li> <li><a href="https://github.com/apache/mina-sshd/commit/3f036c581a6ee88847b8348407891b4f4dcf4de5";><code>3f036c5</code></a> Restrict remote execution of git commands</li> <li><a href="https://github.com/apache/mina-sshd/commit/a792e08922482894db080dd791c112623ed42601";><code>a792e08</code></a> SCP: escape newlines in file names on sending</li> <li><a href="https://github.com/apache/mina-sshd/commit/400626e1af4f329052a49851437485b272147fc4";><code>400626e</code></a> Update CHANGES.md</li> <li><a href="https://github.com/apache/mina-sshd/commit/ab3672f03161cd9f5f7d622bff0335e513c9994d";><code>ab3672f</code></a> SCP: validate filenames</li> <li><a href="https://github.com/apache/mina-sshd/commit/384de9e3a0d5be1e30842142473fb86b9194c879";><code>384de9e</code></a> Update CHANGES.md</li> <li>Additional commits viewable in <a href="https://github.com/apache/mina-sshd/compare/sshd-2.18.0...sshd-2.19.0";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.sshd:sshd-core` from 2.18.0 to 2.19.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/releases";>org.apache.sshd:sshd-core's releases</a>.</em></p> <blockquote> <h2>Apache MINA SSHD 2.19.0</h2> <h2>Bug Fixes</h2> <ul> <li><a href="https://redirect.github.com/apache/mina-sshd/issues/899";>GH-899</a> Fix <code>ProcessShellFactory</code> on Linux</li> <li><a href="https://redirect.github.com/apache/mina-sshd/pull/902";>GH-902</a> Fix client-side handling of sk-* public key signatures (also in the agent interfaces)</li> <li>Limit size of decompressed SSH packets</li> <li>Improve checking SSH user certificates in public-key authentication</li> <li>Improve handling of repository paths in <code>sshd-git</code> on Windows</li> <li>Validate file names in SCP</li> <li>Escape newlines in filenames in the SCP protocol</li> <li>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></li> </ul> <h2>Potential Compatibility Issues</h2> <h3>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></h3> <p>Bundle <code>sshd-git</code> contains a <code>GitPgmCommandFactory</code> that can be configured for an Apache MINA SSHD server. It enables remote execution of git commands via JGit.</p> <p>However, running arbitrary git commands remotely is an exotic use case, and some commands (like <code>git archive --format zip --output somefile.zip</code> or also <code>git clone</code> or <code>git checkout</code>) could even create files on the server. This should be only allowed in an OS-level chrooted environment, which Apache MINA SSHD does not and cannot provide.</p> <p>We have therefore limited the available commands to a small set of whitelisted git commands that might be useful as maintenance commands for authorized power users on a git server implemented based on <code>sshd-git</code>. The command are: <code>archive</code>, <code>blame</code>, <code>branch</code>, <code>describe</code>, <code>diff</code>, <code>gc</code>, <code>log</code>, <code>reflog</code>, <code>show</code>, and <code>status</code>. All these commands can be executed from an client via <code>git --git-dir <repo> <command> <args></code>, where <code><repo></code> is the server-side name of the git repository (its local path on the server relative to the configured root), <code><command></code> is the command name (e.g., <code>archive</code>) and <code><args></code> are the command arguments. Results are sent back via the command output streams (output or error streams) and are thus sent back to the client. For the <code>archive</code>command, the <code>--output</code> (or <code>-o</code>) argument is ignored; the archive is always returned via the command's output stream and this is also sent to the client.</p> <p>Applications that might have relied on the ability to run other JGit command remotely may no longer work. Either implement your own dedicated command factory to enable accesss to certain commands, or set the property <code>GitModuleProperties.RESTRICT_COMMANDS</code> to <code>false</code> on the server-side <code>SshServer</code> (for all sessions) or on particular <code>ServerSession</code>s (for particular individual sessions) to re-enable access to <em>all</em> commands supported by JGit.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/blob/master/CHANGES.md";>org.apache.sshd:sshd-core's changelog</a>.</em></p> <blockquote> <h1>Previous Versions</h1> <ul> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.2.0.md";>Version 2.1.0 to 2.2.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.3.0.md";>Version 2.2.0 to 2.3.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.4.0.md";>Version 2.3.0 to 2.4.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.0.md";>Version 2.4.0 to 2.5.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.1.md";>Version 2.5.0 to 2.5.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.6.0.md";>Version 2.5.1 to 2.6.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.7.0.md";>Version 2.6.0 to 2.7.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.8.0.md";>Version 2.7.0 to 2.8.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.0.md";>Version 2.8.0 to 2.9.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.1.md";>Version 2.9.0 to 2.9.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.2.md";>Version 2.9.1 to 2.9.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.10.0.md";>Version 2.9.2 to 2.10.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.11.0.md";>Version 2.10.0 to 2.11.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.0.md";>Version 2.11.0 to 2.12.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.1.md";>Version 2.12.0 to 2.12.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.0.md";>Version 2.12.1 to 2.13.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.1.md";>Version 2.13.0 to 2.13.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.2.md";>Version 2.13.1 to 2.13.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.14.0.md";>Version 2.13.2 to 2.14.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.15.0.md";>Version 2.14.0 to 2.15.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.16.0.md";>Version 2.15.0 to 2.16.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.0.md";>Version 2.16.0 to 2.17.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.1.md";>Version 2.17.0 to 2.17.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.18.0.md";>Version 2.17.1 to 2.18.0</a></li> </ul> <h1>Latest Version</h1> <ul> <li><strong><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.19.0.md";>Version 2.18.0 to 2.19.0</a></strong></li> </ul> <h1>Planned for Next Version</h1> <h2>Bug Fixes</h2> <h2>New Features</h2> <h2>Potential Compatibility Issues</h2> <h2>Major Code Re-factoring</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/mina-sshd/commit/e2926a2795fb099fa0ad6e72e788b812dda256c6";><code>e2926a2</code></a> [maven-release-plugin] prepare release sshd-2.19.0</li> <li><a href="https://github.com/apache/mina-sshd/commit/49e4408d8ea628f507cda35b02a6423142dcfd32";><code>49e4408</code></a> Prepare release documentation</li> <li><a href="https://github.com/apache/mina-sshd/commit/8caed36abcd4836f5e4ecbd63b679c9a51128905";><code>8caed36</code></a> Bump dependency to org.apache.mina:mina-core</li> <li><a href="https://github.com/apache/mina-sshd/commit/e94075277a3c1d5847f7a396cd4be8cab5650c04";><code>e940752</code></a> Fix copy-paste error in a test</li> <li><a href="https://github.com/apache/mina-sshd/commit/3a93226cb7e7a7cf7d1af9790b2be80275ef82f2";><code>3a93226</code></a> UTF8 fix in NOTICE-bin.txt</li> <li><a href="https://github.com/apache/mina-sshd/commit/3f036c581a6ee88847b8348407891b4f4dcf4de5";><code>3f036c5</code></a> Restrict remote execution of git commands</li> <li><a href="https://github.com/apache/mina-sshd/commit/a792e08922482894db080dd791c112623ed42601";><code>a792e08</code></a> SCP: escape newlines in file names on sending</li> <li><a href="https://github.com/apache/mina-sshd/commit/400626e1af4f329052a49851437485b272147fc4";><code>400626e</code></a> Update CHANGES.md</li> <li><a href="https://github.com/apache/mina-sshd/commit/ab3672f03161cd9f5f7d622bff0335e513c9994d";><code>ab3672f</code></a> SCP: validate filenames</li> <li><a href="https://github.com/apache/mina-sshd/commit/384de9e3a0d5be1e30842142473fb86b9194c879";><code>384de9e</code></a> Update CHANGES.md</li> <li>Additional commits viewable in <a href="https://github.com/apache/mina-sshd/compare/sshd-2.18.0...sshd-2.19.0";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.sshd:sshd-sftp` from 2.18.0 to 2.19.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/releases";>org.apache.sshd:sshd-sftp's releases</a>.</em></p> <blockquote> <h2>Apache MINA SSHD 2.19.0</h2> <h2>Bug Fixes</h2> <ul> <li><a href="https://redirect.github.com/apache/mina-sshd/issues/899";>GH-899</a> Fix <code>ProcessShellFactory</code> on Linux</li> <li><a href="https://redirect.github.com/apache/mina-sshd/pull/902";>GH-902</a> Fix client-side handling of sk-* public key signatures (also in the agent interfaces)</li> <li>Limit size of decompressed SSH packets</li> <li>Improve checking SSH user certificates in public-key authentication</li> <li>Improve handling of repository paths in <code>sshd-git</code> on Windows</li> <li>Validate file names in SCP</li> <li>Escape newlines in filenames in the SCP protocol</li> <li>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></li> </ul> <h2>Potential Compatibility Issues</h2> <h3>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></h3> <p>Bundle <code>sshd-git</code> contains a <code>GitPgmCommandFactory</code> that can be configured for an Apache MINA SSHD server. It enables remote execution of git commands via JGit.</p> <p>However, running arbitrary git commands remotely is an exotic use case, and some commands (like <code>git archive --format zip --output somefile.zip</code> or also <code>git clone</code> or <code>git checkout</code>) could even create files on the server. This should be only allowed in an OS-level chrooted environment, which Apache MINA SSHD does not and cannot provide.</p> <p>We have therefore limited the available commands to a small set of whitelisted git commands that might be useful as maintenance commands for authorized power users on a git server implemented based on <code>sshd-git</code>. The command are: <code>archive</code>, <code>blame</code>, <code>branch</code>, <code>describe</code>, <code>diff</code>, <code>gc</code>, <code>log</code>, <code>reflog</code>, <code>show</code>, and <code>status</code>. All these commands can be executed from an client via <code>git --git-dir <repo> <command> <args></code>, where <code><repo></code> is the server-side name of the git repository (its local path on the server relative to the configured root), <code><command></code> is the command name (e.g., <code>archive</code>) and <code><args></code> are the command arguments. Results are sent back via the command output streams (output or error streams) and are thus sent back to the client. For the <code>archive</code>command, the <code>--output</code> (or <code>-o</code>) argument is ignored; the archive is always returned via the command's output stream and this is also sent to the client.</p> <p>Applications that might have relied on the ability to run other JGit command remotely may no longer work. Either implement your own dedicated command factory to enable accesss to certain commands, or set the property <code>GitModuleProperties.RESTRICT_COMMANDS</code> to <code>false</code> on the server-side <code>SshServer</code> (for all sessions) or on particular <code>ServerSession</code>s (for particular individual sessions) to re-enable access to <em>all</em> commands supported by JGit.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/blob/master/CHANGES.md";>org.apache.sshd:sshd-sftp's changelog</a>.</em></p> <blockquote> <h1>Previous Versions</h1> <ul> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.2.0.md";>Version 2.1.0 to 2.2.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.3.0.md";>Version 2.2.0 to 2.3.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.4.0.md";>Version 2.3.0 to 2.4.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.0.md";>Version 2.4.0 to 2.5.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.1.md";>Version 2.5.0 to 2.5.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.6.0.md";>Version 2.5.1 to 2.6.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.7.0.md";>Version 2.6.0 to 2.7.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.8.0.md";>Version 2.7.0 to 2.8.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.0.md";>Version 2.8.0 to 2.9.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.1.md";>Version 2.9.0 to 2.9.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.2.md";>Version 2.9.1 to 2.9.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.10.0.md";>Version 2.9.2 to 2.10.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.11.0.md";>Version 2.10.0 to 2.11.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.0.md";>Version 2.11.0 to 2.12.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.1.md";>Version 2.12.0 to 2.12.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.0.md";>Version 2.12.1 to 2.13.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.1.md";>Version 2.13.0 to 2.13.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.2.md";>Version 2.13.1 to 2.13.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.14.0.md";>Version 2.13.2 to 2.14.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.15.0.md";>Version 2.14.0 to 2.15.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.16.0.md";>Version 2.15.0 to 2.16.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.0.md";>Version 2.16.0 to 2.17.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.1.md";>Version 2.17.0 to 2.17.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.18.0.md";>Version 2.17.1 to 2.18.0</a></li> </ul> <h1>Latest Version</h1> <ul> <li><strong><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.19.0.md";>Version 2.18.0 to 2.19.0</a></strong></li> </ul> <h1>Planned for Next Version</h1> <h2>Bug Fixes</h2> <h2>New Features</h2> <h2>Potential Compatibility Issues</h2> <h2>Major Code Re-factoring</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/mina-sshd/commit/e2926a2795fb099fa0ad6e72e788b812dda256c6";><code>e2926a2</code></a> [maven-release-plugin] prepare release sshd-2.19.0</li> <li><a href="https://github.com/apache/mina-sshd/commit/49e4408d8ea628f507cda35b02a6423142dcfd32";><code>49e4408</code></a> Prepare release documentation</li> <li><a href="https://github.com/apache/mina-sshd/commit/8caed36abcd4836f5e4ecbd63b679c9a51128905";><code>8caed36</code></a> Bump dependency to org.apache.mina:mina-core</li> <li><a href="https://github.com/apache/mina-sshd/commit/e94075277a3c1d5847f7a396cd4be8cab5650c04";><code>e940752</code></a> Fix copy-paste error in a test</li> <li><a href="https://github.com/apache/mina-sshd/commit/3a93226cb7e7a7cf7d1af9790b2be80275ef82f2";><code>3a93226</code></a> UTF8 fix in NOTICE-bin.txt</li> <li><a href="https://github.com/apache/mina-sshd/commit/3f036c581a6ee88847b8348407891b4f4dcf4de5";><code>3f036c5</code></a> Restrict remote execution of git commands</li> <li><a href="https://github.com/apache/mina-sshd/commit/a792e08922482894db080dd791c112623ed42601";><code>a792e08</code></a> SCP: escape newlines in file names on sending</li> <li><a href="https://github.com/apache/mina-sshd/commit/400626e1af4f329052a49851437485b272147fc4";><code>400626e</code></a> Update CHANGES.md</li> <li><a href="https://github.com/apache/mina-sshd/commit/ab3672f03161cd9f5f7d622bff0335e513c9994d";><code>ab3672f</code></a> SCP: validate filenames</li> <li><a href="https://github.com/apache/mina-sshd/commit/384de9e3a0d5be1e30842142473fb86b9194c879";><code>384de9e</code></a> Update CHANGES.md</li> <li>Additional commits viewable in <a href="https://github.com/apache/mina-sshd/compare/sshd-2.18.0...sshd-2.19.0";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.sshd:sshd-osgi` from 2.18.0 to 2.19.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/releases";>org.apache.sshd:sshd-osgi's releases</a>.</em></p> <blockquote> <h2>Apache MINA SSHD 2.19.0</h2> <h2>Bug Fixes</h2> <ul> <li><a href="https://redirect.github.com/apache/mina-sshd/issues/899";>GH-899</a> Fix <code>ProcessShellFactory</code> on Linux</li> <li><a href="https://redirect.github.com/apache/mina-sshd/pull/902";>GH-902</a> Fix client-side handling of sk-* public key signatures (also in the agent interfaces)</li> <li>Limit size of decompressed SSH packets</li> <li>Improve checking SSH user certificates in public-key authentication</li> <li>Improve handling of repository paths in <code>sshd-git</code> on Windows</li> <li>Validate file names in SCP</li> <li>Escape newlines in filenames in the SCP protocol</li> <li>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></li> </ul> <h2>Potential Compatibility Issues</h2> <h3>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in <code>sshd-git</code></h3> <p>Bundle <code>sshd-git</code> contains a <code>GitPgmCommandFactory</code> that can be configured for an Apache MINA SSHD server. It enables remote execution of git commands via JGit.</p> <p>However, running arbitrary git commands remotely is an exotic use case, and some commands (like <code>git archive --format zip --output somefile.zip</code> or also <code>git clone</code> or <code>git checkout</code>) could even create files on the server. This should be only allowed in an OS-level chrooted environment, which Apache MINA SSHD does not and cannot provide.</p> <p>We have therefore limited the available commands to a small set of whitelisted git commands that might be useful as maintenance commands for authorized power users on a git server implemented based on <code>sshd-git</code>. The command are: <code>archive</code>, <code>blame</code>, <code>branch</code>, <code>describe</code>, <code>diff</code>, <code>gc</code>, <code>log</code>, <code>reflog</code>, <code>show</code>, and <code>status</code>. All these commands can be executed from an client via <code>git --git-dir <repo> <command> <args></code>, where <code><repo></code> is the server-side name of the git repository (its local path on the server relative to the configured root), <code><command></code> is the command name (e.g., <code>archive</code>) and <code><args></code> are the command arguments. Results are sent back via the command output streams (output or error streams) and are thus sent back to the client. For the <code>archive</code>command, the <code>--output</code> (or <code>-o</code>) argument is ignored; the archive is always returned via the command's output stream and this is also sent to the client.</p> <p>Applications that might have relied on the ability to run other JGit command remotely may no longer work. Either implement your own dedicated command factory to enable accesss to certain commands, or set the property <code>GitModuleProperties.RESTRICT_COMMANDS</code> to <code>false</code> on the server-side <code>SshServer</code> (for all sessions) or on particular <code>ServerSession</code>s (for particular individual sessions) to re-enable access to <em>all</em> commands supported by JGit.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/mina-sshd/blob/master/CHANGES.md";>org.apache.sshd:sshd-osgi's changelog</a>.</em></p> <blockquote> <h1>Previous Versions</h1> <ul> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.2.0.md";>Version 2.1.0 to 2.2.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.3.0.md";>Version 2.2.0 to 2.3.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.4.0.md";>Version 2.3.0 to 2.4.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.0.md";>Version 2.4.0 to 2.5.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.5.1.md";>Version 2.5.0 to 2.5.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.6.0.md";>Version 2.5.1 to 2.6.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.7.0.md";>Version 2.6.0 to 2.7.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.8.0.md";>Version 2.7.0 to 2.8.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.0.md";>Version 2.8.0 to 2.9.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.1.md";>Version 2.9.0 to 2.9.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.2.md";>Version 2.9.1 to 2.9.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.10.0.md";>Version 2.9.2 to 2.10.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.11.0.md";>Version 2.10.0 to 2.11.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.0.md";>Version 2.11.0 to 2.12.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.12.1.md";>Version 2.12.0 to 2.12.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.0.md";>Version 2.12.1 to 2.13.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.1.md";>Version 2.13.0 to 2.13.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.13.2.md";>Version 2.13.1 to 2.13.2</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.14.0.md";>Version 2.13.2 to 2.14.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.15.0.md";>Version 2.14.0 to 2.15.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.16.0.md";>Version 2.15.0 to 2.16.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.0.md";>Version 2.16.0 to 2.17.0</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.17.1.md";>Version 2.17.0 to 2.17.1</a></li> <li><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.18.0.md";>Version 2.17.1 to 2.18.0</a></li> </ul> <h1>Latest Version</h1> <ul> <li><strong><a href="https://github.com/apache/mina-sshd/blob/master/docs/changes/2.19.0.md";>Version 2.18.0 to 2.19.0</a></strong></li> </ul> <h1>Planned for Next Version</h1> <h2>Bug Fixes</h2> <h2>New Features</h2> <h2>Potential Compatibility Issues</h2> <h2>Major Code Re-factoring</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/mina-sshd/commit/e2926a2795fb099fa0ad6e72e788b812dda256c6";><code>e2926a2</code></a> [maven-release-plugin] prepare release sshd-2.19.0</li> <li><a href="https://github.com/apache/mina-sshd/commit/49e4408d8ea628f507cda35b02a6423142dcfd32";><code>49e4408</code></a> Prepare release documentation</li> <li><a href="https://github.com/apache/mina-sshd/commit/8caed36abcd4836f5e4ecbd63b679c9a51128905";><code>8caed36</code></a> Bump dependency to org.apache.mina:mina-core</li> <li><a href="https://github.com/apache/mina-sshd/commit/e94075277a3c1d5847f7a396cd4be8cab5650c04";><code>e940752</code></a> Fix copy-paste error in a test</li> <li><a href="https://github.com/apache/mina-sshd/commit/3a93226cb7e7a7cf7d1af9790b2be80275ef82f2";><code>3a93226</code></a> UTF8 fix in NOTICE-bin.txt</li> <li><a href="https://github.com/apache/mina-sshd/commit/3f036c581a6ee88847b8348407891b4f4dcf4de5";><code>3f036c5</code></a> Restrict remote execution of git commands</li> <li><a href="https://github.com/apache/mina-sshd/commit/a792e08922482894db080dd791c112623ed42601";><code>a792e08</code></a> SCP: escape newlines in file names on sending</li> <li><a href="https://github.com/apache/mina-sshd/commit/400626e1af4f329052a49851437485b272147fc4";><code>400626e</code></a> Update CHANGES.md</li> <li><a href="https://github.com/apache/mina-sshd/commit/ab3672f03161cd9f5f7d622bff0335e513c9994d";><code>ab3672f</code></a> SCP: validate filenames</li> <li><a href="https://github.com/apache/mina-sshd/commit/384de9e3a0d5be1e30842142473fb86b9194c879";><code>384de9e</code></a> Update CHANGES.md</li> <li>Additional commits viewable in <a href="https://github.com/apache/mina-sshd/compare/sshd-2.18.0...sshd-2.19.0";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
