Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package jsch for openSUSE:Factory checked in at 2026-09-18 22:03:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/jsch (Old) and /work/SRC/openSUSE:Factory/.jsch.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "jsch" Fri Sep 18 22:03:10 2026 rev:30 rq:1378530 version:2.28.7 Changes: -------- --- /work/SRC/openSUSE:Factory/jsch/jsch.changes 2025-02-07 22:58:06.860635662 +0100 +++ /work/SRC/openSUSE:Factory/.jsch.new.383539/jsch.changes 2026-09-18 22:03:11.814190587 +0200 @@ -1,0 +2,121 @@ +Wed Sep 16 11:26:01 UTC 2026 - Fridrich Strba <[email protected]> + +- Upgrade to version 2.28.7 + * Changes of 2.28.7: + + Add Session accessors for the negotiated algorithms + + As per RFC 8268, enforce range checks on DH public keys. + + add bounds checks while parsing K_S. + ~ #1127: add bounds checks when parsing SFTP vendor-specific + extensions. + ~ Treat the reserved field in certs as an opaque byte array + instead of a String. + * Changes of 2.28.6: + + Fix #1091: Parse certificate-form revoked host keys + (bsc#1279889, CVE-2026-86231) + + Fix #1099: Respect known_hosts markers + * Changes of 2.28.5: + + Refactor: Remove unreachable code in ChannelSftp._put() method + + #1084: add support for reporting exit-signal. + + Accept RSA-CA-signed OpenSSH host certificates + * Changes of 2.28.4: + + Add FFM version of Pageant AgentConnector + * Changes of 2.28.3: + + Fix ChannelAgentForwarding: move rbuf.reset() and fix skip() + in unknown message handler + * Changes of 2.28.2: + + Fix #1045: RSA certificate auth ignores negotiated signature + algorithm + * Changes of 2.28.1: + + Add impsort-maven-plugin to organize imports correctly + according to Google Java Style. + + Fix unit tests when run in certain timezones. + + Fix integration test failures on Apple Silicon by using Alpine + 3.7. + + Run tests on Java 26. + + Update to Maven 3.9.15. + + Bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84 + + Update for new deprecations in Bouncy Castle 1.84. + + #1037 deprecate JSch.addIdentity(), KeyPair.decrypt() & + Session.setPassword() methods that take String inputs instead + of byte[] inputs for passphrases/passwords. + * Changes of 2.28.0: + + Add support for OpenSSH certificates + + Restrict length of decompressed packets + * Changes of 2.27.9: + + ProxySOCKS5 fixes & improvements + + Improve error message when receiving non-EOF status code + during read + * Changes of 2.27.8: + + Update readme with info about other projects leveraging Jsch + + Add support for OpenSSH-Agent on Windows + + Fix multi-release jar to avoid API differences between + versions. + + Update Error Prone compilerArgs. + + Infinite loop fix on checkServerExtInfo() + * Changes of 2.27.7: + + SftpATTRS constructor should be public + * Changes of 2.27.6: + + Fix logging a 'port is null' error when parsing openssh config + file + * Changes of 2.27.5: + + Throw JSchException if an incorrect passphrase is provided to + JSch.addIdentity() + * Changes of 2.27.4: + + Slowness due to blocked threads in Channel.getChannel call + + Update to latest Maven Wrapper + + Switch to using Java 25 for builds + + Update forbiddenapis with newly added support for Java 25 + + fix for infinite looping issue + + Store Channel objects associated with a particular Session with + the Session instance in order to try and improve performance of + Channel lookups by id. + * Changes of 2.27.3: + + Update to Maven 3.9.11. + + Update to latest Java (24.0.2) release. + + Ensure that bnd-maven-plugin doesn't add java package imports + into OSGi imports. + + Run Dependabot on Wednesdays since Github is frequently + overloaded on Mondays & fails. + + Drop unneeded compiler-annotations dependency. + + Generate SPDX SBOM. + + #852 Fix ChannelAgentForwarding when an unknown agent message + type is received immediately preceding a known agent message + type. + + Consistently use Temurin JDK for all Github workflows. + + Add --enable-native-access=ALL-UNNAMED that will be required + for JNA and junixsocket to function in future Java releases. + + Remove additional extraneous dependencies for log4j-core-test. + + Use toolchains plugin to select JDK to allow eventual Maven 4 + support. + * Changes of 2.27.0: + + switch to semver scheme + + Fix decryption of OpenSSH V1 keys that use AEAD ciphers. + + Add support for writing OpenSSH V1 key files. + * Changes of 0.2.26: + + Follow lead from OpenSSH and prefer AES-GCM ciphers to AES-CTR + ciphers + + Catch LinkageError in order to better handle cases in which + classes cannot be loaded via reflection + * Changes of 0.2.25: + + Add support for mlkem768x25519-sha256, mlkem768nistp256-sha256 + & mlkem1024nistp384-sha384 KEX algorithms using JEP 496. + + Stop abusing the packet buffer for signature verification. + + Fix intermittent KEX errors with hybrid PQ/EC algorithms: the + EC shared secret should not be stripped of unnecessary leading + zero bytes since they are concatenated with the PQ secret and + encoded as a string. + + Support custom ThreadFactory. + * Changes of 0.2.24: + + Make more use of dedicated exceptions + + SSH server comparison the channel id from INT_MAX for a signed + value + * Changes of 0.2.23: + + #752: Add getKeys to JSch which makes access to all the config + values possible for troubleshooting + + #560 treat openssh config values ConnectTimeout and + ServerAliveInterval as seconds. ++ Modified patch: + * jsch-junixsocket.patch + + rediff + +------------------------------------------------------------------- @@ -210 +331 @@ - + Improved excepton handling by @norrisjeremy in #200 + + Improved excepton handling Old: ---- jsch-0.2.22.tar.gz New: ---- _scmsync.obsinfo build.specials.obscpio jsch-2.28.7.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jsch.spec ++++++ --- /var/tmp/diff_new_pack.k4R1Q7/_old 2026-09-18 22:03:12.716228392 +0200 +++ /var/tmp/diff_new_pack.k4R1Q7/_new 2026-09-18 22:03:12.717228434 +0200 @@ -20,7 +20,7 @@ # binaries are java 8 compatible %define __requires_exclude java-headless Name: jsch -Version: 0.2.22 +Version: 2.28.7 Release: 0 Summary: Pure Java implementation of SSH2 License: BSD-3-Clause ++++++ _scmsync.obsinfo ++++++ mtime: 1789628700 commit: d08fc7dabef240429424f5cd35dc24534408abe54a394dfdd81471b96fa2ff24 url: https://src.opensuse.org/java-packages/jsch revision: d08fc7dabef240429424f5cd35dc24534408abe54a394dfdd81471b96fa2ff24 projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-09-17 09:05:00.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ jsch-0.2.22.tar.gz -> jsch-2.28.7.tar.gz ++++++ ++++ 18305 lines of diff (skipped) ++++++ jsch-build.xml ++++++ --- /var/tmp/diff_new_pack.k4R1Q7/_old 2026-09-18 22:03:13.185248048 +0200 +++ /var/tmp/diff_new_pack.k4R1Q7/_new 2026-09-18 22:03:13.188248174 +0200 @@ -11,7 +11,7 @@ <property name="project.artifactId" value="jsch"/> <property name="project.version" value="specify_on_command_line"/> - <property name="spec.version" value="0.2"/> + <property name="spec.version" value="2.28"/> <property name="versionWithoutMinus" value="${project.version}"/> <property name="compiler.release" value="8"/> @@ -36,6 +36,12 @@ <property name="build.mrSrcDir.15" value="src/main/java15"/> <property name="build.mrOutputDir.16" value="${build.mrOutputDir}/16"/> <property name="build.mrSrcDir.16" value="src/main/java16"/> + <property name="build.mrOutputDir.19" value="${build.mrOutputDir}/19"/> + <property name="build.mrSrcDir.19" value="src/main/java19"/> + <property name="build.mrOutputDir.23" value="${build.mrOutputDir}/23"/> + <property name="build.mrSrcDir.23" value="src/main/java23"/> + <property name="build.mrOutputDir.24" value="${build.mrOutputDir}/24"/> + <property name="build.mrSrcDir.24" value="src/main/java24"/> <property name="reporting.outputDirectory" value="${build.dir}/site"/> <!-- ====================================================================== --> @@ -80,6 +86,18 @@ <javaversion atleast="16"/> </condition> + <condition property="build19"> + <javaversion atleast="19"/> + </condition> + + <condition property="build23"> + <javaversion atleast="23"/> + </condition> + + <condition property="build24"> + <javaversion atleast="24"/> + </condition> + <target name="compile" description="Compile the code"> <echo>Java/JVM version: ${ant.java.version}</echo> <mkdir dir="${build.genSrcDir}"/> @@ -99,6 +117,7 @@ debug="true" optimize="false" deprecation="true" + encoding="utf-8" release="${compiler.release}" verbose="false" fork="false"> @@ -119,6 +138,7 @@ debug="true" optimize="false" deprecation="true" + encoding="utf-8" source="${compiler.source}" target="${compiler.target}" verbose="false" @@ -138,6 +158,7 @@ debug="true" optimize="false" deprecation="true" + encoding="utf-8" release="9" verbose="false" fork="false"> @@ -160,6 +181,7 @@ debug="true" optimize="false" deprecation="true" + encoding="utf-8" source="${compiler.source}" target="${compiler.target}" verbose="false" @@ -182,6 +204,7 @@ debug="true" optimize="false" deprecation="true" + encoding="utf-8" source="${compiler.source}" target="${compiler.target}" verbose="false" @@ -204,6 +227,7 @@ debug="true" optimize="false" deprecation="true" + encoding="utf-8" source="${compiler.source}" target="${compiler.target}" verbose="false" @@ -226,6 +250,7 @@ debug="true" optimize="false" deprecation="true" + encoding="utf-8" source="${compiler.source}" target="${compiler.target}" verbose="false" @@ -240,6 +265,75 @@ </javac> </target> + <target name="compile19" description="Compile the overrides for Java 19+" if="build19"> + <!-- Override classes for Java 19+ --> + <mkdir dir="${build.mrOutputDir.19}"/> + <javac destdir="${build.mrOutputDir.19}" + nowarn="true" + debug="true" + optimize="false" + deprecation="true" + encoding="utf-8" + source="${compiler.source}" + target="${compiler.target}" + verbose="false" + fork="false"> + <src> + <pathelement location="${build.mrSrcDir.19}"/> + </src> + <classpath> + <path refid="build.classpath"/> + <pathelement location="${build.outputDir}"/> + </classpath> + </javac> + </target> + + <target name="compile23" description="Compile the overrides for Java 23+" if="build23"> + <!-- Override classes for Java 23+ --> + <mkdir dir="${build.mrOutputDir.23}"/> + <javac destdir="${build.mrOutputDir.23}" + nowarn="true" + debug="true" + optimize="false" + deprecation="true" + encoding="utf-8" + source="${compiler.source}" + target="${compiler.target}" + verbose="false" + fork="false"> + <src> + <pathelement location="${build.mrSrcDir.23}"/> + </src> + <classpath> + <path refid="build.classpath"/> + <pathelement location="${build.outputDir}"/> + </classpath> + </javac> + </target> + + <target name="compile24" description="Compile the overrides for Java 24+" if="build24"> + <!-- Override classes for Java 24+ --> + <mkdir dir="${build.mrOutputDir.24}"/> + <javac destdir="${build.mrOutputDir.24}" + nowarn="true" + debug="true" + optimize="false" + deprecation="true" + encoding="utf-8" + source="${compiler.source}" + target="${compiler.target}" + verbose="false" + fork="false"> + <src> + <pathelement location="${build.mrSrcDir.24}"/> + </src> + <classpath> + <path refid="build.classpath"/> + <pathelement location="${build.outputDir}"/> + </classpath> + </javac> + </target> + <!-- ====================================================================== --> <!-- Javadoc target --> <!-- ====================================================================== --> @@ -248,6 +342,7 @@ <javadoc sourcepath="${build.srcDir}" destdir="${reporting.outputDirectory}/apidocs" access="protected" + encoding="utf-8" source="${compiler.source}" verbose="false" version="true" @@ -261,7 +356,6 @@ nohelp="false" nonavbar="false" serialwarn="false" - charset="ISO-8859-1" linksource="false" breakiterator="false"> <classpath refid="build.classpath"/> @@ -272,7 +366,7 @@ <!-- Package target --> <!-- ====================================================================== --> - <target name="package" depends="compile,compile9,compile10,compile11,compile15,compile16" description="Package the application"> + <target name="package" depends="compile,compile9,compile10,compile11,compile15,compile16,compile19,compile24" description="Package the application"> <jar jarfile="${build.dir}/${build.finalName}.jar" compress="true" index="false" @@ -280,15 +374,16 @@ excludes="**/package.html"> <manifest> <attribute name="Bundle-Description" value="JSch is a pure Java implementation of SSH2"/> - <attribute name="Bundle-License" value="https://github.com/mwiede/jsch/blob/master/LICENSE.JZlib.txt,https://github.com/mwiede/jsch/blob/master/LICENSE.jBCrypt.txt,https://github.com/mwiede/jsch/blob/master/LICENSE.txt"/> + <attribute name="Bundle-License" value="ISC;link="https://github.com/mwiede/jsch/blob/master/LICENSE.jBCrypt.txt",Revised BSD;link="https://github.com/mwiede/jsch/blob/master/LICENSE.JZlib.txt",Revised BSD;link="https://github.com/mwiede/jsch/blob/master/LICENSE.txt""/> <attribute name="Bundle-ManifestVersion" value="2"/> <attribute name="Bundle-Name" value="JSch"/> - <attribute name="Bundle-SymbolicName" value="com.jcraft.jsch"/> + <attribute name="Bundle-SymbolicName" value="com.github.mwiede.jsch"/> <attribute name="Bundle-Version" value="${project.version}"/> <attribute name="Export-Package" value="com.jcraft.jsch;version="${project.version}""/> <attribute name="Implementation-Title" value="JSch"/> <attribute name="Implementation-Version" value="${project.version}"/> - <attribute name="Import-Package" value="com.sun.jna.platform.win32;resolution:=optional,com.sun.jna;resolution:=optional,javax.crypto,javax.crypto.interfaces,javax.crypto.spec,org.bouncycastle.crypto.digests;resolution:=optional,org.bouncycastle.crypto.engines;resolution:=optional,org.bouncycastle.crypto.generators;resolution:=optional,org.bouncycastle.crypto.macs;resolution:=optional,org.bouncycastle.crypto.modes;resolution:=optional,org.bouncycastle.crypto.params;resolution:=optional,org.bouncycastle.crypto.signers;resolution:=optional,org.bouncycastle.crypto;resolution:=optional,org.ietf.jgss;resolution:=optional,org.slf4j;resolution:=optional"/> + <attribute name="Import-Package" value="com.sun.jna.platform.win32;version="[5.0,6)";resolution:=optional,com.sun.jna;version="[5.0,6)";resolution:=optional,javax.crypto,javax.crypto.interfaces,javax.crypto.spec,org.apache.logging.log4j;version="[2.0,4)";resolution:=optional,org.bouncycastle.crypto.digests;version="[1.84,2)";resolution:=optional,org.bouncycastle.crypto.engines;version="[1.84,2)";resolution:=optional,org.bouncycastle.crypto.generators;version="[1.84,2)";resolution:=optional,org.bouncycastle.crypto.kems;version="[1.84,2)";resolution:=optional,org.bouncycastle.crypto.macs;version="[1.84,2)";resolution:=optional,org.bouncycastle.crypto.modes;version="[1.84,2)";resolution:=optional,org.bouncycastle.crypto.params;version="[1.84,2)";resolution:=optional,org.bouncycastle.crypto.signers;version="[1.84,2)";resolution:=optional,org.bouncycastle.crypto;version=& quot;[1.84,2)";resolution:=optional,org.bouncycastle.pqc.crypto.ntruprime;version="[1.84,2)";resolution:=optional,org.ietf.jgss;resolution:=optional,org.newsclub.net.unix;resolution:=optional,org.slf4j;version="[1.7,3)";resolution:=optional"/> + <attribute name="Java-Version" value="${compiler.release}"/> <attribute name="Multi-Release" value="true"/> <attribute name="Require-Capability" value="osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=${compiler.target}))""/> <attribute name="Specification-Title" value="JSch"/> ++++++ jsch-junixsocket.patch ++++++ --- /var/tmp/diff_new_pack.k4R1Q7/_old 2026-09-18 22:03:13.199248635 +0200 +++ /var/tmp/diff_new_pack.k4R1Q7/_new 2026-09-18 22:03:13.202248761 +0200 @@ -1,15 +1,15 @@ ---- a/src/main/java/com/jcraft/jsch/SSHAgentConnector.java -+++ b/src/main/java/com/jcraft/jsch/SSHAgentConnector.java -@@ -93,21 +93,7 @@ public class SSHAgentConnector implements AgentConnector { +--- jsch-jsch-2.28.7/src/main/java/com/jcraft/jsch/SSHAgentConnector.java 2026-09-16 12:21:02.896104422 +0200 ++++ jsch-jsch-2.28.7/src/main/java/com/jcraft/jsch/SSHAgentConnector.java 2026-09-16 12:22:33.752011691 +0200 +@@ -93,21 +93,7 @@ } private static USocketFactory getUSocketFactory() throws AgentProxyException { - try { -- return new UnixDomainSocketFactory(); + return new UnixDomainSocketFactory(); - } catch (AgentProxyException e) { - try { - return new JUnixSocketFactory(); -- } catch (NoClassDefFoundError ee) { +- } catch (LinkageError ee) { - AgentProxyException eee = new AgentProxyException("junixsocket library unavailable"); - eee.addSuppressed(e); - eee.addSuppressed(ee); @@ -19,13 +19,12 @@ - throw e; - } - } -+ return new UnixDomainSocketFactory(); } private static Path getSshAuthSocket() throws AgentProxyException { ---- a/src/main/java9/module-info.java -+++ b/src/main/java9/module-info.java -@@ -7,6 +7,5 @@ module com.jcraft.jsch { +--- jsch-jsch-2.28.7/src/main/java9/module-info.java 2026-09-16 12:21:02.907037161 +0200 ++++ jsch-jsch-2.28.7/src/main/java9/module-info.java 2026-09-16 12:21:16.951927480 +0200 +@@ -7,6 +7,5 @@ requires static java.security.jgss; requires static org.apache.logging.log4j; requires static org.bouncycastle.provider;
