You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mina.apache.org by tw...@apache.org on 2026/05/30 08:43:45 UTC
(mina-sshd) branch master updated: Mention security fix
This is an automated email from the ASF dual-hosted git repository.
tomaswolf pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mina-sshd.git
The following commit(s) were added to refs/heads/master by this push:
new 4dd93b937 Mention security fix
4dd93b937 is described below
commit 4dd93b9371ae3d32dbf1bc3dc1f7072de06c3400
Author: Thomas Wolf <tw...@apache.org>
AuthorDate: Sat May 30 10:40:54 2026 +0200
Mention security fix
Resolution of CVE-2026-48827.
---
docs/changes/2.18.0.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/docs/changes/2.18.0.md b/docs/changes/2.18.0.md
index 7a3aa9592..b08e3ac2c 100644
--- a/docs/changes/2.18.0.md
+++ b/docs/changes/2.18.0.md
@@ -4,7 +4,7 @@
* [GH-743](https://github.com/apache/mina-sshd/issues/743) Ensure the Java `ServiceLoader` use a singleton `SftpFileSystemProvider`
* [GH-879](https://github.com/apache/mina-sshd/issues/879) Close SSH channel gracefully on exception in port forwarding
-* Improve handling of repository paths in `sshd-git`.
+* **Security**: Improve handling of repository paths in `sshd-git`. Resolves [CVE-2026-48827](https://www.cve.org/CVERecord?id=CVE-2026-48827), [announced](https://lists.apache.org/thread/910kq9ghm6js0k1yhhbrdm9sf5tqq9c9) 2026-05-30.
## New Features