This is an automated email from the ASF dual-hosted git repository.
tomaswolf pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mina-site.git
The following commit(s) were added to refs/heads/master by this push:
new 0cdf54690 Publish Apache MINA SSHD 2.20.0 and 3.0.0-M6
0cdf54690 is described below
commit 0cdf54690e202f838467620060eabc4fb00b50d8
Author: Thomas Wolf <[email protected]>
AuthorDate: Mon Sep 28 19:53:05 2026 +0200
Publish Apache MINA SSHD 2.20.0 and 3.0.0-M6
---
config.toml | 2 +-
source/downloads-sshd.md | 22 ++++++++++++++++
source/sshd-project/download_2.19.0.md | 11 +++++---
source/sshd-project/download_2.20.0.md | 46 ++++++++++++++++++++++++++++++++++
source/sshd-project/downloads.md | 3 ++-
5 files changed, 78 insertions(+), 6 deletions(-)
diff --git a/config.toml b/config.toml
index 63e9d5dee..d4c40034e 100644
--- a/config.toml
+++ b/config.toml
@@ -45,5 +45,5 @@ version_mina_2_1 = "2.1.15"
version_mina_2_2 = "2.2.9"
version_ftpserver_1_1 = "1.1.4"
version_ftpserver_1_2 = "1.2.1"
-version_sshd = "2.19.0"
+version_sshd = "2.20.0"
version_vysper = "0.7"
diff --git a/source/downloads-sshd.md b/source/downloads-sshd.md
index 8fc607cb9..051fc4daa 100644
--- a/source/downloads-sshd.md
+++ b/source/downloads-sshd.md
@@ -1,5 +1,6 @@
---
title: Downloads
+version: 3.0.0-M6
---
# Latest SSHD Release
@@ -18,8 +19,29 @@ See the release notes for the [Apache Mina SSHD {{<
version_sshd >}} release](./
You can [build](./sshd-project/building.html) the latest version from
[sources](./sshd-project/sources.html).
+# Future 3.0.0 Release
+
+A new major release 3.0.0 of Apache MINA SSHD is currently being developed.
Milestone pre-releases are made available via Maven Central, and source and
binary distributions are available through the usual channels.
+
+Version 3.0.0 is *not* API compatible with the current 2.x main releases.
+
+The last milestone pre-release is **{{< version >}}**.
+
+* The new release is developed in the `dev_3.0` branch of the git repository.
+* [Documentation](https://github.com/apache/mina-sshd/blob/dev_3.0/CHANGES.md)
is available in the git repository.
+* API comparison reports and a rough roadmap are given on a [Apache MINA SSHD
3.0.0 development website](https://apache.github.io/mina-sshd).
+* Source distributions:
+ * [Apache Mina SSHD {{< version >}} Sources
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}-src.tar.gz)
[PGP](https://downloads.apache.org/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}-src.tar.gz.asc) [SHA512](https://downloads.apache.org/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}-src.tar.gz.sha512)
+ * [Apache Mina SSHD {{< version >}} Sources
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}-src.zip)
[PGP](https://downloads.apache.org/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}-src.zip.asc) [SHA512](https://downloads.apache.org/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}-src.zip.sha512)
+* Binary distributions:
+ * [Apache Mina SSHD {{< version >}} Binary
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}.tar.gz)
[PGP](https://downloads.apache.org/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}.tar.gz.asc) [SHA512](https://downloads.apache.org/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}.tar.gz.sha512)
+ * [Apache Mina SSHD {{< version >}} Binary
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}.zip)
[PGP](https://downloads.apache.org/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}.zip.asc) [SHA512](https://downloads.apache.org/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}.zip.sha512)
+
+The 3.0.0 milestone pre-releases pass all the usual quality tests and are
built, signed, and distributed like regular releases.
+
# Previous releases
+* [SSHD 2.19.0](./sshd-project/download_2.19.0.html)
* [SSHD 2.18.0](./sshd-project/download_2.18.0.html)
* [SSHD 2.17.1](./sshd-project/download_2.17.1.html)
* [SSHD 2.17.0](./sshd-project/download_2.17.0.html)
diff --git a/source/sshd-project/download_2.19.0.md
b/source/sshd-project/download_2.19.0.md
index 57ce3e94e..a55e55f7e 100644
--- a/source/sshd-project/download_2.19.0.md
+++ b/source/sshd-project/download_2.19.0.md
@@ -11,11 +11,14 @@ version: 2.19.0
* [GH-899](https://github.com/apache/mina-sshd/issues/899) Fix
`ProcessShellFactory` on Linux
* [GH-902](https://github.com/apache/mina-sshd/pull/902) Fix client-side
handling of sk-* public key signatures (also in the agent interfaces)
* Limit size of decompressed SSH packets
-* Improve checking SSH user certificates in public-key authentication
-* Improve handling of repository paths in `sshd-git` on Windows
-* Validate file names in SCP
* Escape newlines in filenames in the SCP protocol
-* Restrict JGit commands accessible via `GitPgmCommandFactory` in `sshd-git`
+
+**Security Fixes**
+
+* Validate file names in SCP. Resolves
[CVE-2026-56452](https://www.cve.org/CVERecord?id=CVE-2026-56452),
[announced](https://lists.apache.org/thread/xgoqvmksmd94fsqnzqjdtfjxf35os9no)
2026-07-20.
+* Improve handling of repository paths in `sshd-git` on Windows. Resolves
[CVE-2026-56623](https://www.cve.org/CVERecord?id=CVE-2026-56623),
[announced](https://lists.apache.org/thread/bhw26snzgvk0mtqqp5dcyjvczp4kcqky)
2026-07-20.
+* Improve checking SSH user certificates in public-key authentication.
Resolves [CVE-2026-56624](https://www.cve.org/CVERecord?id=CVE-2026-56624),
[announced](https://lists.apache.org/thread/o4c2jml522j3z80gbryqzc2f1253ltp6)
2026-07-20.
+* Restrict JGit commands accessible via `GitPgmCommandFactory` in `sshd-git`.
Resolves [CVE-2026-58624](https://www.cve.org/CVERecord?id=CVE-2026-58624),
[announced](https://lists.apache.org/thread/7c3cry6pdy6hj1q0f28rc72x4o4tlyjo)
2026-07-20.
## New Features
diff --git a/source/sshd-project/download_2.20.0.md
b/source/sshd-project/download_2.20.0.md
new file mode 100644
index 000000000..7ad899dd8
--- /dev/null
+++ b/source/sshd-project/download_2.20.0.md
@@ -0,0 +1,46 @@
+---
+type: sshd
+title: Apache SSHD 2.20.0 Release
+version: 2.20.0
+---
+
+# Overview
+
+## Bug Fixes
+
+* [GH-656](https://github.com/apache/mina-sshd/issues/656)
`ChannelPipedInputStream`: shrink buffer when emptied
+* [GH-906](https://github.com/apache/mina-sshd/issues/906) Fix finding a
signature factory for BC ed25519 keys
+* [GH-911](https://github.com/apache/mina-sshd/issues/911) Fix server-side
SOCKS5 proxy for fragmented and pipelined CONNECT requests
+* Allow asynchronous authentication only for password and keyboard-interactive
authentication schemes
+* Fix authentication requiring multiple public keys (server-side)
+* Better argument handling in sshd-git
+* More checks in authentication (server-side)
+* Better SCP command handling
+* SFTP client: simplify response message handling
+* Fix check-file-name/check-file-handle SFTP v6 extension (server-side)
+* Improve LDAP authentication (sshd-ldap)
+
+## New Features
+
+* [GH-905](https://github.com/apache/mina-sshd/issues/905) Implement the
"from" and "expiry-time" options in `authorized_keys` handling in public key
authentication (server side)
+
+## Potential Compatibility Issues
+
+None.
+
+## Major Code Re-factoring
+
+None.
+
+# Getting the Distributions
+
+* Source distributions:
+ * [Apache Mina SSHD {{< version >}} Sources
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}-src.tar.gz)
[PGP](https://downloads.apache.org/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}-src.tar.gz.asc) [SHA512](https://downloads.apache.org/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}-src.tar.gz.sha512)
+ * [Apache Mina SSHD {{< version >}} Sources
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}-src.zip)
[PGP](https://downloads.apache.org/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}-src.zip.asc) [SHA512](https://downloads.apache.org/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}-src.zip.sha512)
+* Binary distributions:
+ * [Apache Mina SSHD {{< version >}} Binary
(.tar.gz)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}.tar.gz)
[PGP](https://downloads.apache.org/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}.tar.gz.asc) [SHA512](https://downloads.apache.org/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}.tar.gz.sha512)
+ * [Apache Mina SSHD {{< version >}} Binary
(.zip)](https://www.apache.org/dyn/closer.lua/mina/sshd/{{< version
>}}/apache-sshd-{{< version >}}.zip)
[PGP](https://downloads.apache.org/mina/sshd/{{< version >}}/apache-sshd-{{<
version >}}.zip.asc) [SHA512](https://downloads.apache.org/mina/sshd/{{<
version >}}/apache-sshd-{{< version >}}.zip.sha512)
+
+PGP signing public keys for all releases are available in the [Apache MINA
KEYS file](https://downloads.apache.org/mina/KEYS).
+
+Please report any feedback to
[[email protected]](mailto:[email protected]).
diff --git a/source/sshd-project/downloads.md b/source/sshd-project/downloads.md
index 5bcd128ec..7e1143564 100644
--- a/source/sshd-project/downloads.md
+++ b/source/sshd-project/downloads.md
@@ -1,7 +1,7 @@
---
type: sshd
title: SSHD Downloads
-version: 3.0.0-M5
+version: 3.0.0-M6
---
# Latest SSHD Release: {{< version_sshd >}}
@@ -44,6 +44,7 @@ The 3.0.0 milestone pre-releases pass all the usual quality
tests and are built,
# Previous Releases
+* [SSHD 2.19.0](./download_2.19.0.html)
* [SSHD 2.18.0](./download_2.18.0.html)
* [SSHD 2.17.1](./download_2.17.1.html)
* [SSHD 2.17.0](./download_2.17.0.html)
