This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/mina-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new b135e4e67 Updated site from master
(0cdf54690e202f838467620060eabc4fb00b50d8)
b135e4e67 is described below
commit b135e4e67f91e0c1036b5be879cfb0618e52191a
Author: jenkins <[email protected]>
AuthorDate: Mon Sep 28 18:13:30 2026 +0000
Updated site from master (0cdf54690e202f838467620060eabc4fb00b50d8)
---
content/asyncweb-project.html | 2 +-
content/contact.html | 2 +-
content/contributors.html | 2 +-
content/downloads-ftpserver_1_1.html | 2 +-
content/downloads-ftpserver_1_2.html | 2 +-
content/downloads-mina_2_0.html | 2 +-
content/downloads-mina_2_1.html | 2 +-
content/downloads-mina_2_2.html | 2 +-
content/downloads-sshd.html | 37 ++++++++++++---
content/downloads-vysper.html | 2 +-
content/ftpserver-project.html | 2 +-
content/index.html | 2 +-
content/index.xml | 20 ++++++--
content/issue-tracking.html | 2 +-
content/mailing-lists.html | 2 +-
content/mina-project.html | 2 +-
content/privacy-policy.html | 2 +-
content/sitemap.xml | 13 +++--
content/special-thanks.html | 2 +-
content/sshd-project.html | 2 +-
content/sshd-project/download_2.19.0.html | 11 +++--
.../{download_2.19.0.html => download_2.20.0.html} | 55 ++++++++--------------
content/sshd-project/downloads.html | 25 +++++-----
content/sshd-project/index.xml | 16 +++++--
content/verifying-releases.html | 2 +-
content/vysper-project.html | 2 +-
26 files changed, 126 insertions(+), 89 deletions(-)
diff --git a/content/asyncweb-project.html b/content/asyncweb-project.html
index 68c6504fe..b978a7a34 100644
--- a/content/asyncweb-project.html
+++ b/content/asyncweb-project.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/contact.html b/content/contact.html
index fa172cc6d..d690230ab 100644
--- a/content/contact.html
+++ b/content/contact.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/contributors.html b/content/contributors.html
index 16ace7df9..c5c8ee95c 100644
--- a/content/contributors.html
+++ b/content/contributors.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/downloads-ftpserver_1_1.html
b/content/downloads-ftpserver_1_1.html
index fded6b08a..bf0341ffc 100644
--- a/content/downloads-ftpserver_1_1.html
+++ b/content/downloads-ftpserver_1_1.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/downloads-ftpserver_1_2.html
b/content/downloads-ftpserver_1_2.html
index 75fb5f910..dcb270925 100644
--- a/content/downloads-ftpserver_1_2.html
+++ b/content/downloads-ftpserver_1_2.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/downloads-mina_2_0.html b/content/downloads-mina_2_0.html
index 424f7c1eb..08bf9ab72 100644
--- a/content/downloads-mina_2_0.html
+++ b/content/downloads-mina_2_0.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/downloads-mina_2_1.html b/content/downloads-mina_2_1.html
index 46e01be9b..fa034963a 100644
--- a/content/downloads-mina_2_1.html
+++ b/content/downloads-mina_2_1.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/downloads-mina_2_2.html b/content/downloads-mina_2_2.html
index b1c677b0d..d3b2ea26f 100644
--- a/content/downloads-mina_2_2.html
+++ b/content/downloads-mina_2_2.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/downloads-sshd.html b/content/downloads-sshd.html
index e6c4612e2..e81de7c4a 100644
--- a/content/downloads-sshd.html
+++ b/content/downloads-sshd.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
@@ -103,26 +103,49 @@
<h1 id="latest-sshd-release">Latest SSHD Release</h1>
-<p>The latest release is the SSHD 2.19.0 release.
-See the release notes for the <a
href="./sshd-project/download_2.19.0.html">Apache Mina SSHD 2.19.0
release</a>.</p>
+<p>The latest release is the SSHD 2.20.0 release.
+See the release notes for the <a
href="./sshd-project/download_2.20.0.html">Apache Mina SSHD 2.20.0
release</a>.</p>
<ul>
<li>Source distributions:
<ul>
-<li><a
href="https://dlcdn.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz";>Apache
Mina SSHD 2.19.0 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz.sha512";>SHA512</a></li>
-<li><a
href="https://dlcdn.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip";>Apache
Mina SSHD 2.19.0 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip.sha512";>SHA512</a></li>
+<li><a
href="https://dlcdn.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz";>Apache
Mina SSHD 2.20.0 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://dlcdn.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip";>Apache
Mina SSHD 2.20.0 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip.sha512";>SHA512</a></li>
</ul>
</li>
<li>Binary distributions:
<ul>
-<li><a
href="https://dlcdn.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz";>Apache
Mina SSHD 2.19.0 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz.sha512";>SHA512</a></li>
-<li><a
href="https://dlcdn.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.zip";>Apache
Mina SSHD 2.19.0 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.zip.sha512";>SHA512</a></li>
+<li><a
href="https://dlcdn.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz";>Apache
Mina SSHD 2.20.0 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://dlcdn.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.zip";>Apache
Mina SSHD 2.20.0 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.zip.sha512";>SHA512</a></li>
</ul>
</li>
</ul>
<h1 id="development-snapshots">Development snapshots</h1>
<p>You can <a href="./sshd-project/building.html">build</a> the latest version
from <a href="./sshd-project/sources.html">sources</a>.</p>
+<h1 id="future-300-release">Future 3.0.0 Release</h1>
+<p>A new major release 3.0.0 of Apache MINA SSHD is currently being developed.
Milestone pre-releases are made available via Maven Central, and source and
binary distributions are available through the usual channels.</p>
+<p>Version 3.0.0 is <em>not</em> API compatible with the current 2.x main
releases.</p>
+<p>The last milestone pre-release is <strong>3.0.0-M6</strong>.</p>
+<ul>
+<li>The new release is developed in the <code>dev_3.0</code> branch of the git
repository.</li>
+<li><a
href="https://github.com/apache/mina-sshd/blob/dev_3.0/CHANGES.md";>Documentation</a>
is available in the git repository.</li>
+<li>API comparison reports and a rough roadmap are given on a <a
href="https://apache.github.io/mina-sshd";>Apache MINA SSHD 3.0.0 development
website</a>.</li>
+<li>Source distributions:
+<ul>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.tar.gz";>Apache
Mina SSHD 3.0.0-M6 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.zip";>Apache
Mina SSHD 3.0.0-M6 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.zip.sha512";>SHA512</a></li>
+</ul>
+</li>
+<li>Binary distributions:
+<ul>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.tar.gz";>Apache
Mina SSHD 3.0.0-M6 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.zip";>Apache
Mina SSHD 3.0.0-M6 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.zip.sha512";>SHA512</a></li>
+</ul>
+</li>
+</ul>
+<p>The 3.0.0 milestone pre-releases pass all the usual quality tests and are
built, signed, and distributed like regular releases.</p>
<h1 id="previous-releases">Previous releases</h1>
<ul>
+<li><a href="./sshd-project/download_2.19.0.html">SSHD 2.19.0</a></li>
<li><a href="./sshd-project/download_2.18.0.html">SSHD 2.18.0</a></li>
<li><a href="./sshd-project/download_2.17.1.html">SSHD 2.17.1</a></li>
<li><a href="./sshd-project/download_2.17.0.html">SSHD 2.17.0</a></li>
diff --git a/content/downloads-vysper.html b/content/downloads-vysper.html
index a1e60b6ca..dcb21514e 100644
--- a/content/downloads-vysper.html
+++ b/content/downloads-vysper.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/ftpserver-project.html b/content/ftpserver-project.html
index 83a5e3a9d..701f9c90c 100644
--- a/content/ftpserver-project.html
+++ b/content/ftpserver-project.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/index.html b/content/index.html
index f81888418..0cec03e79 100644
--- a/content/index.html
+++ b/content/index.html
@@ -67,7 +67,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/index.xml b/content/index.xml
index 93088ab48..3d194995b 100644
--- a/content/index.xml
+++ b/content/index.xml
@@ -940,7 +940,8 @@ Bug Fixes GH-875 Use Apache Parent POM 36 Getting the
Distributions Source di
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
<guid>https://mina.apache.org/sshd-project/download_2.19.0.html</guid>
- <description>Overview Bug Fixes GH-899 Fix ProcessShellFactory on Linux
GH-902 Fix client-side handling of sk-* public key signatures (also in the
agent interfaces) Limit size of decompressed SSH packets Improve checking SSH
user certificates in public-key authentication Improve handling of repository
paths in sshd-git on Windows Validate file names in SCP Escape newlines in
filenames in the SCP protocol Restrict JGit commands accessible via
GitPgmCommandFactory in sshd-git New F [...]
+ <description>Overview Bug Fixes GH-899 Fix ProcessShellFactory on Linux
GH-902 Fix client-side handling of sk-* public key signatures (also in the
agent interfaces) Limit size of decompressed SSH packets Escape newlines in
filenames in the SCP protocol Security Fixes
+ Validate file names in SCP. Resolves CVE-2026-56452, announced 2026-07-20.
Improve handling of repository paths in sshd-git on Windows. Resolves
CVE-2026-56623, announced 2026-07-20. Improve checking SSH user certificates in
public-key authentication.</description>
</item>
<item>
@@ -954,6 +955,15 @@ Getting the Distributions Source and binary distributions
are available via the
This release is archived and is no longer supported.</description>
</item>
+ <item>
+ <title>Apache SSHD 2.20.0 Release</title>
+ <link>https://mina.apache.org/sshd-project/download_2.20.0.html</link>
+ <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
+
+ <guid>https://mina.apache.org/sshd-project/download_2.20.0.html</guid>
+ <description>Overview Bug Fixes GH-656 ChannelPipedInputStream: shrink
buffer when emptied GH-906 Fix finding a signature factory for BC ed25519 keys
GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT
requests Allow asynchronous authentication only for password and
keyboard-interactive authentication schemes Fix authentication requiring
multiple public keys (server-side) Better argument handling in sshd-git More
checks in authentication (server-side) Better S [...]
+ </item>
+
<item>
<title>Apache SSHD 2.3.0 Release</title>
<link>https://mina.apache.org/sshd-project/download_2.3.0.html</link>
@@ -1431,8 +1441,8 @@ All Releases Apache FtpServer 1.2.1 Release - Feb 1th,
2025 Apache FtpServer 1.
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
<guid>https://mina.apache.org/downloads-sshd.html</guid>
- <description>Latest SSHD Release The latest release is the SSHD 2.19.0
release. See the release notes for the Apache Mina SSHD 2.19.0 release.
- Source distributions: Apache Mina SSHD 2.19.0 Sources (.tar.gz) PGP SHA512
Apache Mina SSHD 2.19.0 Sources (.zip) PGP SHA512 Binary distributions:
Apache Mina SSHD 2.19.0 Binary (.tar.gz) PGP SHA512 Apache Mina SSHD 2.19.0
Binary (.zip) PGP SHA512 Development snapshots You can build the latest
version from sources.</description>
+ <description>Latest SSHD Release The latest release is the SSHD 2.20.0
release. See the release notes for the Apache Mina SSHD 2.20.0 release.
+ Source distributions: Apache Mina SSHD 2.20.0 Sources (.tar.gz) PGP SHA512
Apache Mina SSHD 2.20.0 Sources (.zip) PGP SHA512 Binary distributions:
Apache Mina SSHD 2.20.0 Binary (.tar.gz) PGP SHA512 Apache Mina SSHD 2.20.0
Binary (.zip) PGP SHA512 Development snapshots You can build the latest
version from sources.</description>
</item>
<item>
@@ -2119,8 +2129,8 @@ Normal Git Access Anyone can check code out of Git. You
only need to specify a u
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
<guid>https://mina.apache.org/sshd-project/downloads.html</guid>
- <description>Latest SSHD Release: 2.19.0 The latest release is the SSHD
2.19.0 release. See the release notes.
- Source distributions: Apache Mina SSHD 2.19.0 Sources (.tar.gz) PGP SHA512
Apache Mina SSHD 2.19.0 Sources (.zip) PGP SHA512 Binary distributions:
Apache Mina SSHD 2.19.0 Binary (.tar.gz) PGP SHA512 Apache Mina SSHD 2.19.0
Binary (.zip) PGP SHA512 See also Verifying Releases.
+ <description>Latest SSHD Release: 2.20.0 The latest release is the SSHD
2.20.0 release. See the release notes.
+ Source distributions: Apache Mina SSHD 2.20.0 Sources (.tar.gz) PGP SHA512
Apache Mina SSHD 2.20.0 Sources (.zip) PGP SHA512 Binary distributions:
Apache Mina SSHD 2.20.0 Binary (.tar.gz) PGP SHA512 Apache Mina SSHD 2.20.0
Binary (.zip) PGP SHA512 See also Verifying Releases.
Development Snapshots You can build the latest version from
sources.</description>
</item>
diff --git a/content/issue-tracking.html b/content/issue-tracking.html
index 347291ead..905c5a6b1 100644
--- a/content/issue-tracking.html
+++ b/content/issue-tracking.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/mailing-lists.html b/content/mailing-lists.html
index 7a5c2e45d..224b926f7 100644
--- a/content/mailing-lists.html
+++ b/content/mailing-lists.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/mina-project.html b/content/mina-project.html
index b80c0264f..401b6928b 100644
--- a/content/mina-project.html
+++ b/content/mina-project.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/privacy-policy.html b/content/privacy-policy.html
index 469eab09d..489f84fcf 100644
--- a/content/privacy-policy.html
+++ b/content/privacy-policy.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/sitemap.xml b/content/sitemap.xml
index 3edaf8e64..4eab69804 100644
--- a/content/sitemap.xml
+++ b/content/sitemap.xml
@@ -439,7 +439,7 @@
<url>
<loc>https://mina.apache.org/sshd-project/download_2.19.0.html</loc>
- <lastmod>2026-07-08T19:15:38+02:00</lastmod>
+ <lastmod>2026-09-28T19:53:05+02:00</lastmod>
</url>
<url>
@@ -447,6 +447,11 @@
<lastmod>2026-04-06T22:44:39+02:00</lastmod>
</url>
+ <url>
+ <loc>https://mina.apache.org/sshd-project/download_2.20.0.html</loc>
+ <lastmod>2026-09-28T19:53:05+02:00</lastmod>
+ </url>
+
<url>
<loc>https://mina.apache.org/sshd-project/download_2.3.0.html</loc>
<lastmod>2026-04-06T22:44:39+02:00</lastmod>
@@ -679,7 +684,7 @@
<url>
<loc>https://mina.apache.org/downloads-sshd.html</loc>
- <lastmod>2026-05-28T08:38:58+02:00</lastmod>
+ <lastmod>2026-09-28T19:53:05+02:00</lastmod>
</url>
<url>
@@ -1024,7 +1029,7 @@
<url>
<loc>https://mina.apache.org/sshd-project/downloads.html</loc>
- <lastmod>2026-07-08T19:15:38+02:00</lastmod>
+ <lastmod>2026-09-28T19:53:05+02:00</lastmod>
</url>
<url>
@@ -1064,7 +1069,7 @@
<url>
<loc>https://mina.apache.org/sshd-project.html</loc>
- <lastmod>2026-07-08T19:15:38+02:00</lastmod>
+ <lastmod>2026-09-28T19:53:05+02:00</lastmod>
</url>
<url>
diff --git a/content/special-thanks.html b/content/special-thanks.html
index 15063d335..a3b5cc074 100644
--- a/content/special-thanks.html
+++ b/content/special-thanks.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/sshd-project.html b/content/sshd-project.html
index c4b4e2f9e..ec2d0975f 100644
--- a/content/sshd-project.html
+++ b/content/sshd-project.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/sshd-project/download_2.19.0.html
b/content/sshd-project/download_2.19.0.html
index 4b2ffee0c..e2a5e41f5 100644
--- a/content/sshd-project/download_2.19.0.html
+++ b/content/sshd-project/download_2.19.0.html
@@ -98,11 +98,14 @@
<li><a href="https://github.com/apache/mina-sshd/issues/899";>GH-899</a> Fix
<code>ProcessShellFactory</code> on Linux</li>
<li><a href="https://github.com/apache/mina-sshd/pull/902";>GH-902</a> Fix
client-side handling of sk-* public key signatures (also in the agent
interfaces)</li>
<li>Limit size of decompressed SSH packets</li>
-<li>Improve checking SSH user certificates in public-key authentication</li>
-<li>Improve handling of repository paths in <code>sshd-git</code> on
Windows</li>
-<li>Validate file names in SCP</li>
<li>Escape newlines in filenames in the SCP protocol</li>
-<li>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in
<code>sshd-git</code></li>
+</ul>
+<p><strong>Security Fixes</strong></p>
+<ul>
+<li>Validate file names in SCP. Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-56452";>CVE-2026-56452</a>, <a
href="https://lists.apache.org/thread/xgoqvmksmd94fsqnzqjdtfjxf35os9no";>announced</a>
2026-07-20.</li>
+<li>Improve handling of repository paths in <code>sshd-git</code> on Windows.
Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-56623";>CVE-2026-56623</a>, <a
href="https://lists.apache.org/thread/bhw26snzgvk0mtqqp5dcyjvczp4kcqky";>announced</a>
2026-07-20.</li>
+<li>Improve checking SSH user certificates in public-key authentication.
Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-56624";>CVE-2026-56624</a>, <a
href="https://lists.apache.org/thread/o4c2jml522j3z80gbryqzc2f1253ltp6";>announced</a>
2026-07-20.</li>
+<li>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in
<code>sshd-git</code>. Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-58624";>CVE-2026-58624</a>, <a
href="https://lists.apache.org/thread/7c3cry6pdy6hj1q0f28rc72x4o4tlyjo";>announced</a>
2026-07-20.</li>
</ul>
<h2 id="new-features">New Features</h2>
<p>None.</p>
diff --git a/content/sshd-project/download_2.19.0.html
b/content/sshd-project/download_2.20.0.html
similarity index 50%
copy from content/sshd-project/download_2.19.0.html
copy to content/sshd-project/download_2.20.0.html
index 4b2ffee0c..3964649f6 100644
--- a/content/sshd-project/download_2.19.0.html
+++ b/content/sshd-project/download_2.20.0.html
@@ -2,7 +2,7 @@
<html lang="en">
<head>
- <title>Apache SSHD 2.19.0 Release — Apache MINA</title>
+ <title>Apache SSHD 2.20.0 Release — Apache MINA</title>
<link href="/assets/css/common.css" rel="stylesheet" type="text/css"/>
<link href="/assets/css/sshd.css" rel="stylesheet" type="text/css"/>
@@ -95,53 +95,38 @@
<h1 id="overview">Overview</h1>
<h2 id="bug-fixes">Bug Fixes</h2>
<ul>
-<li><a href="https://github.com/apache/mina-sshd/issues/899";>GH-899</a> Fix
<code>ProcessShellFactory</code> on Linux</li>
-<li><a href="https://github.com/apache/mina-sshd/pull/902";>GH-902</a> Fix
client-side handling of sk-* public key signatures (also in the agent
interfaces)</li>
-<li>Limit size of decompressed SSH packets</li>
-<li>Improve checking SSH user certificates in public-key authentication</li>
-<li>Improve handling of repository paths in <code>sshd-git</code> on
Windows</li>
-<li>Validate file names in SCP</li>
-<li>Escape newlines in filenames in the SCP protocol</li>
-<li>Restrict JGit commands accessible via <code>GitPgmCommandFactory</code> in
<code>sshd-git</code></li>
+<li><a href="https://github.com/apache/mina-sshd/issues/656";>GH-656</a>
<code>ChannelPipedInputStream</code>: shrink buffer when emptied</li>
+<li><a href="https://github.com/apache/mina-sshd/issues/906";>GH-906</a> Fix
finding a signature factory for BC ed25519 keys</li>
+<li><a href="https://github.com/apache/mina-sshd/issues/911";>GH-911</a> Fix
server-side SOCKS5 proxy for fragmented and pipelined CONNECT requests</li>
+<li>Allow asynchronous authentication only for password and
keyboard-interactive authentication schemes</li>
+<li>Fix authentication requiring multiple public keys (server-side)</li>
+<li>Better argument handling in sshd-git</li>
+<li>More checks in authentication (server-side)</li>
+<li>Better SCP command handling</li>
+<li>SFTP client: simplify response message handling</li>
+<li>Fix check-file-name/check-file-handle SFTP v6 extension (server-side)</li>
+<li>Improve LDAP authentication (sshd-ldap)</li>
</ul>
<h2 id="new-features">New Features</h2>
-<p>None.</p>
+<ul>
+<li><a href="https://github.com/apache/mina-sshd/issues/905";>GH-905</a>
Implement the “from” and “expiry-time” options in
<code>authorized_keys</code> handling in public key authentication (server
side)</li>
+</ul>
<h2 id="potential-compatibility-issues">Potential Compatibility Issues</h2>
-<h3
id="restrict-jgit-commands-accessible-via-gitpgmcommandfactory-in-sshd-git">Restrict
JGit commands accessible via <code>GitPgmCommandFactory</code> in
<code>sshd-git</code></h3>
-<p>Bundle <code>sshd-git</code> contains a <code>GitPgmCommandFactory</code>
that can be configured for an Apache MINA SSHD server.
-It enables remote execution of git commands via JGit.</p>
-<p>However, running arbitrary git commands remotely is an exotic use case, and
some commands (like
-<code>git archive --format zip --output somefile.zip</code> or also <code>git
clone</code> or <code>git checkout</code>) could even create
-files on the server. This should be only allowed in an OS-level chrooted
environment, which Apache MINA
-SSHD does not and cannot provide.</p>
-<p>We have therefore limited the available commands to a small set of
whitelisted git commands that might
-be useful as maintenance commands for authorized power users on a git server
implemented based on <code>sshd-git</code>.
-The command are: <code>archive</code>, <code>blame</code>,
<code>branch</code>, <code>describe</code>, <code>diff</code>, <code>gc</code>,
<code>log</code>, <code>reflog</code>, <code>show</code>, and
<code>status</code>.
-All these commands can be executed from an client via <code>git --git-dir
<repo> <command> <args></code>, where
<code><repo></code>
-is the server-side name of the git repository (its local path on the server
relative to the configured
-root), <code><command></code> is the command name (e.g.,
<code>archive</code>) and <code><args></code> are the command arguments.
Results are
-sent back via the command output streams (output or error streams) and are
thus sent back to the client.
-For the <code>archive</code>command, the <code>--output</code> (or
<code>-o</code>) argument is ignored; the archive is always returned via
-the command’s output stream and this is also sent to the client.</p>
-<p>Applications that might have relied on the ability to run other JGit
command remotely may no longer work.
-Either implement your own dedicated command factory to enable accesss to
certain commands, or set the
-property <code>GitModuleProperties.RESTRICT_COMMANDS</code> to
<code>false</code> on the server-side <code>SshServer</code> (for all sessions)
-or on particular <code>ServerSession</code>s (for particular individual
sessions) to re-enable access to <em>all</em> commands
-supported by JGit.</p>
+<p>None.</p>
<h2 id="major-code-re-factoring">Major Code Re-factoring</h2>
<p>None.</p>
<h1 id="getting-the-distributions">Getting the Distributions</h1>
<ul>
<li>Source distributions:
<ul>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz";>Apache
Mina SSHD 2.19.0 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz.sha512";>SHA512</a></li>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip";>Apache
Mina SSHD 2.19.0 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz";>Apache
Mina SSHD 2.20.0 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip";>Apache
Mina SSHD 2.20.0 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip.sha512";>SHA512</a></li>
</ul>
</li>
<li>Binary distributions:
<ul>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz";>Apache
Mina SSHD 2.19.0 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz.sha512";>SHA512</a></li>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.19.0/apache-sshd-2.19.0.zip";>Apache
Mina SSHD 2.19.0 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.zip.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz";>Apache
Mina SSHD 2.20.0 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.20.0/apache-sshd-2.20.0.zip";>Apache
Mina SSHD 2.20.0 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.zip.sha512";>SHA512</a></li>
</ul>
</li>
</ul>
diff --git a/content/sshd-project/downloads.html
b/content/sshd-project/downloads.html
index 43256a257..23fe8634a 100644
--- a/content/sshd-project/downloads.html
+++ b/content/sshd-project/downloads.html
@@ -92,20 +92,20 @@
- <h1 id="latest-sshd-release-hahahugoshortcode-s0-hbhb">Latest SSHD
Release: 2.19.0</h1>
-<p>The latest release is the SSHD 2.19.0 release.
-See the <a href="download_2.19.0.html">release notes</a>.</p>
+ <h1 id="latest-sshd-release-hahahugoshortcode-s0-hbhb">Latest SSHD
Release: 2.20.0</h1>
+<p>The latest release is the SSHD 2.20.0 release.
+See the <a href="download_2.20.0.html">release notes</a>.</p>
<ul>
<li>Source distributions:
<ul>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz";>Apache
Mina SSHD 2.19.0 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.tar.gz.sha512";>SHA512</a></li>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip";>Apache
Mina SSHD 2.19.0 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0-src.zip.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz";>Apache
Mina SSHD 2.20.0 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip";>Apache
Mina SSHD 2.20.0 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0-src.zip.sha512";>SHA512</a></li>
</ul>
</li>
<li>Binary distributions:
<ul>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz";>Apache
Mina SSHD 2.19.0 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.tar.gz.sha512";>SHA512</a></li>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.19.0/apache-sshd-2.19.0.zip";>Apache
Mina SSHD 2.19.0 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.19.0/apache-sshd-2.19.0.zip.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz";>Apache
Mina SSHD 2.20.0 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/2.20.0/apache-sshd-2.20.0.zip";>Apache
Mina SSHD 2.20.0 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/2.20.0/apache-sshd-2.20.0.zip.sha512";>SHA512</a></li>
</ul>
</li>
</ul>
@@ -115,27 +115,28 @@ See the <a href="download_2.19.0.html">release
notes</a>.</p>
<h1 id="future-300-release">Future 3.0.0 Release</h1>
<p>A new major release 3.0.0 of Apache MINA SSHD is currently being developed.
Milestone pre-releases are made available via Maven Central, and source and
binary distributions are available through the usual channels.</p>
<p>Version 3.0.0 is <em>not</em> API compatible with the current 2.x main
releases.</p>
-<p>The last milestone pre-release is <strong>3.0.0-M5</strong>.</p>
+<p>The last milestone pre-release is <strong>3.0.0-M6</strong>.</p>
<ul>
<li>The new release is developed in the <code>dev_3.0</code> branch of the git
repository.</li>
<li><a
href="https://github.com/apache/mina-sshd/blob/dev_3.0/CHANGES.md";>Documentation</a>
is available in the git repository.</li>
<li>API comparison reports and a rough roadmap are given on a <a
href="https://apache.github.io/mina-sshd";>Apache MINA SSHD 3.0.0 development
website</a>.</li>
<li>Source distributions:
<ul>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5-src.tar.gz";>Apache
Mina SSHD 3.0.0-M5 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5-src.tar.gz.sha512";>SHA512</a></li>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5-src.zip";>Apache
Mina SSHD 3.0.0-M5 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5-src.zip.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.tar.gz";>Apache
Mina SSHD 3.0.0-M6 Sources (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.zip";>Apache
Mina SSHD 3.0.0-M6 Sources (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6-src.zip.sha512";>SHA512</a></li>
</ul>
</li>
<li>Binary distributions:
<ul>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5.tar.gz";>Apache
Mina SSHD 3.0.0-M5 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5.tar.gz.sha512";>SHA512</a></li>
-<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5.zip";>Apache
Mina SSHD 3.0.0-M5 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M5/apache-sshd-3.0.0-M5.zip.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.tar.gz";>Apache
Mina SSHD 3.0.0-M6 Binary (.tar.gz)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.tar.gz.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.tar.gz.sha512";>SHA512</a></li>
+<li><a
href="https://www.apache.org/dyn/closer.lua/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.zip";>Apache
Mina SSHD 3.0.0-M6 Binary (.zip)</a> <a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.zip.asc";>PGP</a>
<a
href="https://downloads.apache.org/mina/sshd/3.0.0-M6/apache-sshd-3.0.0-M6.zip.sha512";>SHA512</a></li>
</ul>
</li>
</ul>
<p>The 3.0.0 milestone pre-releases pass all the usual quality tests and are
built, signed, and distributed like regular releases.</p>
<h1 id="previous-releases">Previous Releases</h1>
<ul>
+<li><a href="./download_2.19.0.html">SSHD 2.19.0</a></li>
<li><a href="./download_2.18.0.html">SSHD 2.18.0</a></li>
<li><a href="./download_2.17.1.html">SSHD 2.17.1</a></li>
<li><a href="./download_2.17.0.html">SSHD 2.17.0</a></li>
diff --git a/content/sshd-project/index.xml b/content/sshd-project/index.xml
index f1b2de03a..d96abc015 100644
--- a/content/sshd-project/index.xml
+++ b/content/sshd-project/index.xml
@@ -448,7 +448,8 @@ Bug Fixes GH-875 Use Apache Parent POM 36 Getting the
Distributions Source di
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
<guid>https://mina.apache.org/sshd-project/download_2.19.0.html</guid>
- <description>Overview Bug Fixes GH-899 Fix ProcessShellFactory on Linux
GH-902 Fix client-side handling of sk-* public key signatures (also in the
agent interfaces) Limit size of decompressed SSH packets Improve checking SSH
user certificates in public-key authentication Improve handling of repository
paths in sshd-git on Windows Validate file names in SCP Escape newlines in
filenames in the SCP protocol Restrict JGit commands accessible via
GitPgmCommandFactory in sshd-git New F [...]
+ <description>Overview Bug Fixes GH-899 Fix ProcessShellFactory on Linux
GH-902 Fix client-side handling of sk-* public key signatures (also in the
agent interfaces) Limit size of decompressed SSH packets Escape newlines in
filenames in the SCP protocol Security Fixes
+ Validate file names in SCP. Resolves CVE-2026-56452, announced 2026-07-20.
Improve handling of repository paths in sshd-git on Windows. Resolves
CVE-2026-56623, announced 2026-07-20. Improve checking SSH user certificates in
public-key authentication.</description>
</item>
<item>
@@ -462,6 +463,15 @@ Getting the Distributions Source and binary distributions
are available via the
This release is archived and is no longer supported.</description>
</item>
+ <item>
+ <title>Apache SSHD 2.20.0 Release</title>
+ <link>https://mina.apache.org/sshd-project/download_2.20.0.html</link>
+ <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
+
+ <guid>https://mina.apache.org/sshd-project/download_2.20.0.html</guid>
+ <description>Overview Bug Fixes GH-656 ChannelPipedInputStream: shrink
buffer when emptied GH-906 Fix finding a signature factory for BC ed25519 keys
GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT
requests Allow asynchronous authentication only for password and
keyboard-interactive authentication schemes Fix authentication requiring
multiple public keys (server-side) Better argument handling in sshd-git More
checks in authentication (server-side) Better S [...]
+ </item>
+
<item>
<title>Apache SSHD 2.3.0 Release</title>
<link>https://mina.apache.org/sshd-project/download_2.3.0.html</link>
@@ -633,8 +643,8 @@ This release is archived and is no longer
supported.</description>
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
<guid>https://mina.apache.org/sshd-project/downloads.html</guid>
- <description>Latest SSHD Release: 2.19.0 The latest release is the SSHD
2.19.0 release. See the release notes.
- Source distributions: Apache Mina SSHD 2.19.0 Sources (.tar.gz) PGP SHA512
Apache Mina SSHD 2.19.0 Sources (.zip) PGP SHA512 Binary distributions:
Apache Mina SSHD 2.19.0 Binary (.tar.gz) PGP SHA512 Apache Mina SSHD 2.19.0
Binary (.zip) PGP SHA512 See also Verifying Releases.
+ <description>Latest SSHD Release: 2.20.0 The latest release is the SSHD
2.20.0 release. See the release notes.
+ Source distributions: Apache Mina SSHD 2.20.0 Sources (.tar.gz) PGP SHA512
Apache Mina SSHD 2.20.0 Sources (.zip) PGP SHA512 Binary distributions:
Apache Mina SSHD 2.20.0 Binary (.tar.gz) PGP SHA512 Apache Mina SSHD 2.20.0
Binary (.zip) PGP SHA512 See also Verifying Releases.
Development Snapshots You can build the latest version from
sources.</description>
</item>
diff --git a/content/verifying-releases.html b/content/verifying-releases.html
index 6a3c00864..e26f507e2 100644
--- a/content/verifying-releases.html
+++ b/content/verifying-releases.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
diff --git a/content/vysper-project.html b/content/vysper-project.html
index 3d5be4c7e..0a592ea4d 100644
--- a/content/vysper-project.html
+++ b/content/vysper-project.html
@@ -66,7 +66,7 @@
<li><a href="/downloads-mina_2_2.html">Mina 2.2.9</a></li>
<li><a href="/downloads-ftpserver_1_1.html">FtpServer
1.1.4</a></li>
<li><a href="/downloads-ftpserver_1_2.html">FtpServer
1.2.1</a></li>
- <li><a href="/downloads-sshd.html">SSHD 2.19.0</a></li>
+ <li><a href="/downloads-sshd.html">SSHD 2.20.0</a></li>
<li><a href="/downloads-vysper.html">Vysper 0.7</a></li>
</ul>
<h5>Projects</h5>
