Skip to content

SSHFS 3.7.6

Latest
Latest

Choose a tag to compare

View all tags
@h4sh5 h4sh5 released this 29 May 23:44
sshfs-3.7.6
7a2d988
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Added new maintainer: abhinavagarwal07 Abhinav Agarwal
  • Fixed critical vulnerability CVE-2026-47187 - Symlink Escape: Rogue SFTP Server to Local File Read/Write), credit to abhinavagarwal07
  • New -o contain_symlinks and -o no_contain_symlinks to control symlink containment behavior
  • Fixed high severity vulnerability CVE-2026-48711 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection'), credit to abhinavagarwal07
  • Fixed null-deref warning in tokenize_on_space, promote strict-warnings to required
  • Added a number of tests in CI, including rename, chmod, fsync, statvfs values, error paths, option coverage
  • Fixed malformed SFTP reply handling
  • Hardened Github Actions workflow with SHA pins, permissions, timeouts, and dependabot
Assets 4
Loading