This is an automated email from the ASF dual-hosted git repository.
gnodet pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mina-site.git
The following commit(s) were added to refs/heads/master by this push:
new 4982ef2ee Publish SSHD 2.12.0
4982ef2ee is described below
commit 4982ef2ee95bca830c1ab3db4fb6cd871aa730a2
Author: Guillaume Nodet <[email protected]>
AuthorDate: Thu Jan 18 11:06:33 2024 +0100
Publish SSHD 2.12.0
---
config.toml | 2 +-
source/sshd-project/download_2.12.0.md | 50 ++++++++++++++++++++++++++++++++++
source/sshd-project/downloads.md | 15 +++++-----
3 files changed, 58 insertions(+), 9 deletions(-)
diff --git a/config.toml b/config.toml
index 310438f8a..7b416d1e1 100644
--- a/config.toml
+++ b/config.toml
@@ -45,5 +45,5 @@ version_mina_2_1 = "2.1.8"
version_mina_2_2 = "2.2.3"
version_ftpserver_1_1 = "1.1.4"
version_ftpserver_1_2 = "1.2.0"
-version_sshd = "2.11.0"
+version_sshd = "2.12.0"
version_vysper = "0.7"
diff --git a/source/sshd-project/download_2.12.0.md
b/source/sshd-project/download_2.12.0.md
new file mode 100644
index 000000000..519fc4682
--- /dev/null
+++ b/source/sshd-project/download_2.12.0.md
@@ -0,0 +1,50 @@
+---
+type: sshd
+title: Apache SSHD 2.12.0 Release
+---
+
+# Overview
+
+Apache Mina SSHD 2.12.0 contains a number of enhancements and bug-fixes. See
the lists at
+the [GitHub issue
tracker](https://github.com/apache/mina-sshd/issues?q=milestone%3A2.12.0).
+
+## Bug Fixes
+
+* [GH-428/GH-392](https://github.com/apache/mina-sshd/issues/428) SCP client
fails silently when error signalled due to missing file or lacking permissions
+* [GH-434](https://github.com/apache/mina-sshd/issues/434) Ignore unknown key
types from agent or in OpenSSH host keys extension
+
+
+## New Features
+
+* [GH-429](https://github.com/apache/mina-sshd/issues/429) Support GIT
protocol-v2
+* [GH-445](https://github.com/apache/mina-sshd/issues/445) OpenSSH "strict key
exchange" protocol extension
([CVE-2023-48795](https://nvd.nist.gov/vuln/detail/CVE-2023-48795) mitigation)
+
+## Behavioral changes and enhancements
+
+### New `ScpTransferEventListener` callback method
+
+Following [GH-428/GH-392](https://github.com/apache/mina-sshd/issues/428) a
new `handleReceiveCommandAckInfo` method has been added to enable users to
inspect
+acknowledgements of a `receive` related command. The user is free to inspect
the command that was attempted as well as the response code and decide how
+to handle it - including even throwing an exception if OK status (if this
makes sense for whatever reason). The default implementation checks for ERROR
code and throws
+an exception if so.
+
+### OpenSSH protocol extension: strict key exchange
+
+[GH-445](https://github.com/apache/mina-sshd/issues/445) implements an
extension to the SSH protocol introduced
+in OpenSSH 9.6. This ["strict key exchange"
extension](https://github.com/openssh/openssh-portable/blob/master/PROTOCOL)
+hardens the SSH key exchange against the ["Terrapin
attack"](https://www.terrapin-attack.com/)
+([CVE-2023-48795](https://nvd.nist.gov/vuln/detail/CVE-2023-48795)). The
extension is active if both parties
+announce their support for it at the start of the initial key exchange. If
only one party announces support,
+it is not activated to ensure compatibility with SSH implementations that do
not implement it. Apache MINA sshd
+clients and servers always announce their support for strict key exchange.
+
+# Getting the Distributions
+
+* Source distributions:
+ * [Apache Mina SSHD 2.12.0 Sources
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.12.0/apache-sshd-2.12.0-src.tar.gz)
[PGP](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0-src.tar.gz.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0-src.tar.gz.sha512)
+ * [Apache Mina SSHD 2.12.0 Sources
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.12.0/apache-sshd-2.12.0-src.zip)
[PGP](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0-src.zip.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0-src.zip.sha512)
+* Binary distributions:
+ * [Apache Mina SSHD 2.12.0 Binary
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.12.0/apache-sshd-2.12.0.tar.gz)
[PGP](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0.tar.gz.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0.tar.gz.sha512)
+ * [Apache Mina SSHD 2.12.0 Binary
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.12.0/apache-sshd-2.12.0.zip)
[PGP](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0.zip.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0.zip.sha512)
+
+Please report any feedback to
[[email protected]](mailto:[email protected]).
diff --git a/source/sshd-project/downloads.md b/source/sshd-project/downloads.md
index ac1850cad..4a8593f82 100644
--- a/source/sshd-project/downloads.md
+++ b/source/sshd-project/downloads.md
@@ -5,17 +5,15 @@ title: SSHD Downloads
# Latest SSHD Release
-The latest release is the SSHD 2.11.0 release.
-Apache Mina SSHD 2.11.0 contains a number of enhancements and bug-fixes. See
the lists at the
-[Apache issue
tracker](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310849&version=12353699)
-and at the [GitHub issue
tracker](https://github.com/apache/mina-sshd/issues?q=milestone%3A2.11.0).
+The latest release is the SSHD 2.12.0 release.
+Apache Mina SSHD 2.12.0 contains a number of enhancements and bug-fixes. See
the [release notes](download_2.12.0.md).
* Source distributions:
- * [Apache Mina SSHD 2.11.0 Sources
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.11.0/apache-sshd-2.11.0-src.tar.gz)
[PGP](https://www.apache.org/dist/mina/sshd/2.11.0/apache-sshd-2.11.0-src.tar.gz.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.11.0/apache-sshd-2.11.0-src.tar.gz.sha512)
- * [Apache Mina SSHD 2.11.0 Sources
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.11.0/apache-sshd-2.11.0-src.zip)
[PGP](https://www.apache.org/dist/mina/sshd/2.11.0/apache-sshd-2.11.0-src.zip.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.11.0/apache-sshd-2.11.0-src.zip.sha512)
+ * [Apache Mina SSHD 2.12.0 Sources
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.12.0/apache-sshd-2.12.0-src.tar.gz)
[PGP](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0-src.tar.gz.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0-src.tar.gz.sha512)
+ * [Apache Mina SSHD 2.12.0 Sources
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.12.0/apache-sshd-2.12.0-src.zip)
[PGP](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0-src.zip.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0-src.zip.sha512)
* Binary distributions:
- * [Apache Mina SSHD 2.11.0 Binary
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.11.0/apache-sshd-2.11.0.tar.gz)
[PGP](https://www.apache.org/dist/mina/sshd/2.11.0/apache-sshd-2.11.0.tar.gz.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.11.0/apache-sshd-2.11.0.tar.gz.sha512)
- * [Apache Mina SSHD 2.11.0 Binary
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.11.0/apache-sshd-2.11.0.zip)
[PGP](https://www.apache.org/dist/mina/sshd/2.11.0/apache-sshd-2.11.0.zip.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.11.0/apache-sshd-2.11.0.zip.sha512)
+ * [Apache Mina SSHD 2.12.0 Binary
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.12.0/apache-sshd-2.12.0.tar.gz)
[PGP](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0.tar.gz.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0.tar.gz.sha512)
+ * [Apache Mina SSHD 2.12.0 Binary
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/2.12.0/apache-sshd-2.12.0.zip)
[PGP](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0.zip.asc)
[SHA512](https://www.apache.org/dist/mina/sshd/2.12.0/apache-sshd-2.12.0.zip.sha512)
# Development snapshots
@@ -62,4 +60,5 @@ You can [build](building.html) the latest version from
[sources](sources.html).
* [SSHD 2.9.3](./download_2.9.3.html)
* [SSHD 2.10.0](./download_2.10.0.html)
* [SSHD 2.11.0](./download_2.11.0.html)
+* [SSHD 2.12.0](./download_2.12.0.html)
