You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mina.apache.org by tw...@apache.org on 2026/05/30 08:43:45 UTC

(mina-sshd) branch master updated: Mention security fix

This is an automated email from the ASF dual-hosted git repository.

tomaswolf pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mina-sshd.git


The following commit(s) were added to refs/heads/master by this push:
     new 4dd93b937 Mention security fix
4dd93b937 is described below

commit 4dd93b9371ae3d32dbf1bc3dc1f7072de06c3400
Author: Thomas Wolf <tw...@apache.org>
AuthorDate: Sat May 30 10:40:54 2026 +0200

    Mention security fix
    
    Resolution of CVE-2026-48827.
---
 docs/changes/2.18.0.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/changes/2.18.0.md b/docs/changes/2.18.0.md
index 7a3aa9592..b08e3ac2c 100644
--- a/docs/changes/2.18.0.md
+++ b/docs/changes/2.18.0.md
@@ -4,7 +4,7 @@
 
 * [GH-743](https://github.com/apache/mina-sshd/issues/743) Ensure the Java `ServiceLoader` use a singleton `SftpFileSystemProvider`
 * [GH-879](https://github.com/apache/mina-sshd/issues/879) Close SSH channel gracefully on exception in port forwarding
-* Improve handling of repository paths in `sshd-git`.
+* **Security**: Improve handling of repository paths in `sshd-git`. Resolves [CVE-2026-48827](https://www.cve.org/CVERecord?id=CVE-2026-48827), [announced](https://lists.apache.org/thread/910kq9ghm6js0k1yhhbrdm9sf5tqq9c9) 2026-05-30.
 
 ## New Features