This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/mina-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new d3341aa92 Updated site from master
(9d38f8894f9449d4ed7754c91e2386ab509b3c97)
d3341aa92 is described below
commit d3341aa9298c523850968c2e6292a80d2ae14708
Author: jenkins <[email protected]>
AuthorDate: Sat Oct 3 12:08:08 2026 +0000
Updated site from master (9d38f8894f9449d4ed7754c91e2386ab509b3c97)
---
content/index.xml | 3 ++-
content/sitemap.xml | 4 ++--
content/sshd-project/download_2.20.0.html | 22 +++++++++++++++-------
content/sshd-project/index.xml | 3 ++-
4 files changed, 21 insertions(+), 11 deletions(-)
diff --git a/content/index.xml b/content/index.xml
index ee6efb489..65450576c 100644
--- a/content/index.xml
+++ b/content/index.xml
@@ -962,7 +962,8 @@ This release is archived and is no longer
supported.</description>
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
<guid>https://mina.apache.org/sshd-project/download_2.20.0.html</guid>
- <description>Overview Bug Fixes GH-656 ChannelPipedInputStream: shrink
buffer when emptied GH-906 Fix finding a signature factory for BC ed25519 keys
GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT
requests Allow asynchronous authentication only for password and
keyboard-interactive authentication schemes Fix authentication requiring
multiple public keys (server-side) Better argument handling in sshd-git More
checks in authentication (server-side) Better S [...]
+ <description>Overview Bug Fixes GH-656 ChannelPipedInputStream: shrink
buffer when emptied GH-906 Fix finding a signature factory for BC ed25519 keys
GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT
requests More checks in authentication (server-side) Security fixes
+ Allow asynchronous authentication only for password and keyboard-interactive
authentication schemes. Resolves CVE-2026-77185, announced 2026-09-29. Fix
authentication requiring multiple public keys (server-side). Resolves
CVE-2026-93994, announced 2026-09-29. Better argument handling in sshd-git.
Resolves CVE-2026-93995, announced 2026-09-29.</description>
</item>
<item>
diff --git a/content/sitemap.xml b/content/sitemap.xml
index 59cbec5ae..ef76d409e 100644
--- a/content/sitemap.xml
+++ b/content/sitemap.xml
@@ -449,7 +449,7 @@
<url>
<loc>https://mina.apache.org/sshd-project/download_2.20.0.html</loc>
- <lastmod>2026-09-28T19:53:05+02:00</lastmod>
+ <lastmod>2026-10-03T14:00:06+02:00</lastmod>
</url>
<url>
@@ -1069,7 +1069,7 @@
<url>
<loc>https://mina.apache.org/sshd-project.html</loc>
- <lastmod>2026-09-28T20:28:20+02:00</lastmod>
+ <lastmod>2026-10-03T14:00:06+02:00</lastmod>
</url>
<url>
diff --git a/content/sshd-project/download_2.20.0.html
b/content/sshd-project/download_2.20.0.html
index 3964649f6..a5dac9a08 100644
--- a/content/sshd-project/download_2.20.0.html
+++ b/content/sshd-project/download_2.20.0.html
@@ -98,14 +98,22 @@
<li><a href="https://github.com/apache/mina-sshd/issues/656";>GH-656</a>
<code>ChannelPipedInputStream</code>: shrink buffer when emptied</li>
<li><a href="https://github.com/apache/mina-sshd/issues/906";>GH-906</a> Fix
finding a signature factory for BC ed25519 keys</li>
<li><a href="https://github.com/apache/mina-sshd/issues/911";>GH-911</a> Fix
server-side SOCKS5 proxy for fragmented and pipelined CONNECT requests</li>
-<li>Allow asynchronous authentication only for password and
keyboard-interactive authentication schemes</li>
-<li>Fix authentication requiring multiple public keys (server-side)</li>
-<li>Better argument handling in sshd-git</li>
<li>More checks in authentication (server-side)</li>
-<li>Better SCP command handling</li>
-<li>SFTP client: simplify response message handling</li>
-<li>Fix check-file-name/check-file-handle SFTP v6 extension (server-side)</li>
-<li>Improve LDAP authentication (sshd-ldap)</li>
+</ul>
+<p><strong>Security fixes</strong></p>
+<ul>
+<li>Allow asynchronous authentication only for password and
keyboard-interactive authentication schemes. Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-77185";>CVE-2026-77185</a>, <a
href="https://lists.apache.org/thread.html/t8pn812yq8ndokxyfxztg8tovov1284n";>announced</a>
2026-09-29.</li>
+<li>Fix authentication requiring multiple public keys (server-side). Resolves
<a href="https://www.cve.org/CVERecord?id=CVE-2026-93994";>CVE-2026-93994</a>,
<a
href="https://lists.apache.org/thread.html/9t3vsm8rnvwdv9779mlg1lq2fbwojdwp";>announced</a>
2026-09-29.</li>
+<li>Better argument handling in sshd-git. Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-93995";>CVE-2026-93995</a>, <a
href="https://lists.apache.org/thread.html/k13ox2xlry38h9gh6rhmh1d9zs345clk";>announced</a>
2026-09-29.</li>
+<li>Better SCP command handling. Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-93996";>CVE-2026-93996</a>, <a
href="https://lists.apache.org/thread.html/xwk8vogkpphcpm01hrt9tb6mgnpjzp35";>announced</a>
2026-09-29.</li>
+<li>SFTP client: simplify response message handling. Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-94002";>CVE-2026-94002</a>, <a
href="https://lists.apache.org/thread.html/x2cb00kh4qvsq145tj2w4g3toy8cybld";>announced</a>
2026-09-29.</li>
+<li>Fix check-file-name/check-file-handle SFTP v6 extension (server-side).
Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-94029";>CVE-2026-94029</a>, <a
href="https://lists.apache.org/thread.html/ytbl4rwby62xl7llm3wp7k975wwdx99t";>announced</a>
2026-09-29.</li>
+<li>Improve LDAP authentication (sshd-ldap).
+<ul>
+<li>Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-94052";>CVE-2026-94052</a>, <a
href="https://lists.apache.org/thread.html/qch5kdwwms13y6bylb7c6qqzq718wn24";>announced</a>
2026-09-29.</li>
+<li>Resolves <a
href="https://www.cve.org/CVERecord?id=CVE-2026-94053";>CVE-2026-94053</a>, <a
href="https://lists.apache.org/thread.html/cyrxkdzl3c70rrqs3klqphqz1hwm7p41";>announced</a>
2026-09-29.</li>
+</ul>
+</li>
</ul>
<h2 id="new-features">New Features</h2>
<ul>
diff --git a/content/sshd-project/index.xml b/content/sshd-project/index.xml
index 9d850ac78..f225f25f8 100644
--- a/content/sshd-project/index.xml
+++ b/content/sshd-project/index.xml
@@ -470,7 +470,8 @@ This release is archived and is no longer
supported.</description>
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
<guid>https://mina.apache.org/sshd-project/download_2.20.0.html</guid>
- <description>Overview Bug Fixes GH-656 ChannelPipedInputStream: shrink
buffer when emptied GH-906 Fix finding a signature factory for BC ed25519 keys
GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT
requests Allow asynchronous authentication only for password and
keyboard-interactive authentication schemes Fix authentication requiring
multiple public keys (server-side) Better argument handling in sshd-git More
checks in authentication (server-side) Better S [...]
+ <description>Overview Bug Fixes GH-656 ChannelPipedInputStream: shrink
buffer when emptied GH-906 Fix finding a signature factory for BC ed25519 keys
GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT
requests More checks in authentication (server-side) Security fixes
+ Allow asynchronous authentication only for password and keyboard-interactive
authentication schemes. Resolves CVE-2026-77185, announced 2026-09-29. Fix
authentication requiring multiple public keys (server-side). Resolves
CVE-2026-93994, announced 2026-09-29. Better argument handling in sshd-git.
Resolves CVE-2026-93995, announced 2026-09-29.</description>
</item>
<item>
