What's Changed
- Add Session accessors for the negotiated algorithms by @fornwall in #1101
- As per RFC 8268, enforce range checks on DH public keys. by @norrisjeremy in #1105
- add bounds checks while parsing K_S. by @norrisjeremy in #1106
-
- #1127: add bounds checks when parsing SFTP vendor-specific extensions.
- Treat the reserved field in certs as an opaque byte array instead of a String. by @norrisjeremy in #1128
Depenency Updates
- Bump org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0 by @dependabot[bot] in #1103
- Bump org.apache.maven.plugins:maven-toolchains-plugin from 3.2.0 to 3.3.0 by @dependabot[bot] in #1102
- Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 by @dependabot[bot] in #1109
- Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 by @dependabot[bot] in #1110
- Bump github/codeql-action/autobuild from 4.37.3 to 4.37.4 by @dependabot[bot] in #1111
- Bump actions/setup-java from 5.6.0 to 5.7.0 by @dependabot[bot] in #1114
- Bump github/codeql-action/init from 4.37.3 to 4.37.4 by @dependabot[bot] in #1113
- Bump github/codeql-action/analyze from 4.37.3 to 4.37.4 by @dependabot[bot] in #1112
- Bump org.bouncycastle:bcprov-jdk18on from 1.85 to 1.85.2 by @dependabot[bot] in #1121
- Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 by @dependabot[bot] in #1123
- Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 by @dependabot[bot] in #1131
- Bump github/codeql-action/init from 4.37.4 to 4.37.7 by @dependabot[bot] in #1132
- Bump junixsocket.version from 2.10.1 to 2.11.0 by @dependabot[bot] in #1129
- Bump JamesIves/github-pages-deploy-action from 4.8.0 to 4.9.0 by @dependabot[bot] in #1125
- Bump github/codeql-action/autobuild from 4.37.4 to 4.37.7 by @dependabot[bot] in #1130
- Bump vapier/coverity-scan-action from 1.8.0 to 1.9.0 by @dependabot[bot] in #1122
New Contributors
Full Changelog: jsch-2.28.6...jsch-2.28.7
Contributors
fornwall, norrisjeremy, and dependabot