diff --git a/AUTHORS b/AUTHORS index 1a187fa..3d4a0b1 100644 --- a/AUTHORS +++ b/AUTHORS @@ -1,7 +1,9 @@ -Current Maintainer +Current Maintainers ------------------ -None. +Haoxi Tan +Abhinav Agarwal + Past Maintainers diff --git a/ChangeLog.rst b/ChangeLog.rst index 3b61745..7856ba9 100644 --- a/ChangeLog.rst +++ b/ChangeLog.rst @@ -1,3 +1,15 @@ +Release 3.7.6 (2026-05-30) +-------------------------- + +* Added new maintainer: abhinavagarwal07 Abhinav Agarwal +* Fixed critical vulnerability CVE-2026-47187 - Symlink Escape: Rogue SFTP Server to Local File Read/Write), credit to abhinavagarwal07 +* New -o contain_symlinks and -o no_contain_symlinks to control symlink containment behavior +* Fixed high severity vulnerability CVE-2026-48711 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection'), credit to abhinavagarwal07 +* Fixed null-deref warning in tokenize_on_space, promote strict-warnings to required +* Added a number of tests in CI, including rename, chmod, fsync, statvfs values, error paths, option coverage +* Fixed malformed SFTP reply handling +* Hardened Github Actions workflow with SHA pins, permissions, timeouts, and dependabot + Release 3.7.5 (2025-11-11) -------------------------- diff --git a/meson.build b/meson.build index d030769..ce3dc64 100644 --- a/meson.build +++ b/meson.build @@ -1,4 +1,4 @@ -project('sshfs', 'c', version: '3.7.5', +project('sshfs', 'c', version: '3.7.6', meson_version: '>= 0.40', default_options: [ 'buildtype=debugoptimized' ]) diff --git a/sshfs.rst b/sshfs.rst index 599e7e5..8fe72a5 100644 --- a/sshfs.rst +++ b/sshfs.rst @@ -353,9 +353,11 @@ https://github.com/libfuse/libfuse/issues. Authors ======= -SSHFS is currently maintained by Nikolaus Rath , +SSHFS was maintained by Nikolaus Rath , and was created by Miklos Szeredi . +See https://github.com/libfuse/sshfs for new maintainer information. + This man page was originally written by Bartosz Fenski for the Debian GNU/Linux distribution (but it may be used by others).