jsch-2.28.8

What's Changed

• 2.28.8 changes by @norrisjeremy in #1134
  • #1133: bounds check incoming SSH_FXP_DATA responses.
  • #1133: cap length of incoming HTTP status response lines.
  • #1127: expand on previous SftpATTRS bounds checks to properly close SSH_FX_READDIR handles.
  • #1139: add bounds checks when parsing prompts from SSH_MSG_USERAUTH_INFO_REQUEST messages.
  • #1127 & #1139: expand upon previous bounds checks to account for arithmetic overflow.
• Support wildcard host certificate principals by @tc-tlv in #1108
• Expose local SFTP window/packet size setters as public by @courville in #1145

Dependency Updates

• Bump github/codeql-action/init from 4.37.7 to 4.37.8 by @dependabot[bot] in #1136
• Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 by @dependabot[bot] in #1141
• Bump junixsocket.version from 2.11.0 to 2.11.1 by @dependabot[bot] in #1140
• Bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19 by @dependabot[bot] in #1148
• Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 by @dependabot[bot] in #1152
• Bump org.codehaus.mojo:templating-maven-plugin from 3.1.0 to 3.1.1 by @dependabot[bot] in #1153
• Bump org.slf4j:slf4j-api from 2.0.19 to 2.0.20 by @dependabot[bot] in #1171
• Bump net.codecrete.windows-api:windowsapi-maven-plugin from 0.8.6 to 0.8.7 by @dependabot[bot] in #1170
• Bump biz.aQute.bnd:bnd-maven-plugin from 7.3.0 to 7.4.0 by @dependabot[bot] in #1135
• Bump surefire.version from 3.5.6 to 3.6.0 by @dependabot[bot] in #1146
• Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 by @dependabot[bot] in #1147
• Bump org.bouncycastle:bcprov-jdk18on from 1.85.2 to 1.86 by @dependabot[bot] in #1150
• Bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 by @dependabot[bot] in #1151
• Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 by @dependabot[bot] in #1154
• Bump actions/setup-java from 5.7.0 to 6.0.1 by @dependabot[bot] in #1156
• Bump org.apache.maven:apache-maven from 3.9.16 to 3.10.0 by @dependabot[bot] in #1176
• Bump github/codeql-action/analyze from 4.37.9 to 4.38.2 by @dependabot[bot] in #1174
• Bump github/codeql-action/autobuild from 4.37.7 to 4.38.2 by @dependabot[bot] in #1173
• Bump github/codeql-action/init from 4.37.8 to 4.38.2 by @dependabot[bot] in #1172
• Bump de.thetaphi:forbiddenapis from 3.10 to 3.11 by @dependabot[bot] in #1169

New Contributors

• @tc-tlv made their first contribution in #1108
• @courville made their first contribution in #1145

Full Changelog: jsch-2.28.7...jsch-2.28.8