-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Jul 2024 10:13:59 +0000 Source: putty Binary: pterm pterm-dbgsym putty putty-dbgsym putty-tools putty-tools-dbgsym Architecture: mipsel Version: 0.74-1+deb11u2 Distribution: bullseye Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Bastien Roucariès Description: pterm - PuTTY terminal emulator putty - Telnet/SSH client for X putty-tools - command-line tools for SSH, SCP, and SFTP Changes: putty (0.74-1+deb11u2) bullseye; urgency=medium . * Non-maintainer upload. * Cherry-pick from upstream: - Refactor the ssh_hash vtable. - Add an extra HMAC constructor function. - Fix CVE-2024-31497: biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words, an adversary may already have enough signature information to compromise a victim's private key, even if there is no further use of vulnerable PuTTY versions. Checksums-Sha1: fa844c7e55907c8bfb104a41d99af86250ad1517 673324 pterm-dbgsym_0.74-1+deb11u2_mipsel.deb 6b1f558f01a8ec05117a818d92e1330e9e1058e8 208108 pterm_0.74-1+deb11u2_mipsel.deb 2af2d42dc905fb5236fc1cd30d6ffd7bbcc8cac8 2165872 putty-dbgsym_0.74-1+deb11u2_mipsel.deb 8ccb6d0a25df2ebc66655f747d025df367813ad6 3739652 putty-tools-dbgsym_0.74-1+deb11u2_mipsel.deb ed2ae760568b909b65cc4e0d61ea7041488e2973 439976 putty-tools_0.74-1+deb11u2_mipsel.deb 152fa602694c3ccd371c100d9ad76e2ec68f9f40 15936 putty_0.74-1+deb11u2_mipsel-buildd.buildinfo 7b7c54ee6443c2bc3c38155c8de99952c1b763ed 439228 putty_0.74-1+deb11u2_mipsel.deb Checksums-Sha256: da14ca80ca087de78e01aa3d503324cf6768b74a799ec28e471e0fe662b6858f 673324 pterm-dbgsym_0.74-1+deb11u2_mipsel.deb 04636d34f6c552e1f85b8a4b73d7137e8926018ec73aee44e95084545ca9e688 208108 pterm_0.74-1+deb11u2_mipsel.deb c967341bb515e31e6be0663f9f86bf4bca4b0a34bf2c635cad9e518f8de0b515 2165872 putty-dbgsym_0.74-1+deb11u2_mipsel.deb 32133c123b4ccca69f5923d3277f9fa4ba8b24cd83e90d8d0a67e8eac4965afb 3739652 putty-tools-dbgsym_0.74-1+deb11u2_mipsel.deb 48aafbc6a91e24607d004f43a496c0954a0b9c0bc99dcca0d7fe9c6ce1c0948f 439976 putty-tools_0.74-1+deb11u2_mipsel.deb 0f60ddc1cab1adbc77a36d9997c1a7d4442404a003b1ca509487f56d17c76a02 15936 putty_0.74-1+deb11u2_mipsel-buildd.buildinfo 2fcebaf7939f6945bd5bf985f822193eba0f33b9bea06c5aeff35c1edc5ebf15 439228 putty_0.74-1+deb11u2_mipsel.deb Files: fd9a25622c8c38ec6d6df5ee054242b3 673324 debug optional pterm-dbgsym_0.74-1+deb11u2_mipsel.deb 24c09d5419bb7f69887134abacd82385 208108 x11 optional pterm_0.74-1+deb11u2_mipsel.deb 20b93f9c7ee293d995493c1145f6ea54 2165872 debug optional putty-dbgsym_0.74-1+deb11u2_mipsel.deb 449503c7864895e06e2f0267fca1a194 3739652 debug optional putty-tools-dbgsym_0.74-1+deb11u2_mipsel.deb 1c8d284bfed9274c8cd116e960e020e7 439976 net optional putty-tools_0.74-1+deb11u2_mipsel.deb 7b8fc5e01d5d4d3b610e844ff24716bc 15936 net optional putty_0.74-1+deb11u2_mipsel-buildd.buildinfo a798c978d5bd9fa5f036b53a131d83e8 439228 net optional putty_0.74-1+deb11u2_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEunmvxaaGKuI+hxxClmZGXOM83t8FAma4qlcACgkQlmZGXOM8 3t8dYBAA3LooVro9FZ6STCEUxXN6S0Sn2M/fZHAfQlw3WklZU04eezW1FdB4JwPz Jg1FdZTS6whipydQolGQ53dd/4bOzpmeVmBZSwnCijrBAuS9yxNOj13FkJwCgBIb Ja6pvTPFTrNl83KXfK0XO+B/6DHdqbnG+hrR+ur7BR6kvFkmMHr+9CNnzHP+kCta ADc4/Tkui3QzGVRg7AsR93rvZxHpGWB72oFXIOdK7Kcn0tuBFHJv2EhAAqm4ZR9q 30Ei+iTpOdWuaBzRdsCU+bFby73Bj8r5rWnFzpyp+7GOM2UClAjAst8g5M/lMPIW XrbshhapMgCmzBa2BI0k5td45kUOAaHmF6VGYKL9GKSbeJnjlqV/rbTxtIgzFcie SOhTHqPyADWDumgDzqH42hWQtmg6ZbUttD1OyfqobIE8rGW9DWlYSfVl8yMSdclH YPitlvyJZLt5jt/XmILFAChoAYheVlCQhOTbUavipdiNW0+tMCyeuLMzMRRMQx4y sA6PT7rERHXvFKZw1YI/0CP1NRSAdO4kWUAgOPwzqFsyX6yAAiAna2QMhbG5qR69 2TBwz8kxB4NPU7L1CAvV89aqtFKhRkxVh2mp1xDXlyJsPIy5w9xwO2ktYl84g8wF oKh1kqayl1mRkVOuObHdy8Bq0HsvDLw5av9BGEf+uIgvsUdt2uI= =VfD9 -----END PGP SIGNATURE-----