lp:ubuntu/precise-security/putty

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

27. By Colin Watson on 2013-08-07

* CVE-2013-4206: Buffer underrun in modmul could corrupt the heap.
* CVE-2013-4852: Negative string length in public-key signatures could
  cause integer overflow and overwrite all of memory (closes: #718779).
* CVE-2013-4207: Non-coprime values in DSA signatures can cause buffer
  overflow in modular inverse.
* CVE-2013-4208: Private keys were left in memory after being used by
  PuTTY tools.
* Backport some general proactive potentially-security-relevant tightening
  from upstream.

26. By Colin Watson on 2012-03-04

* Backport from upstream (Simon Tatham, Jacob Nevins):
  - Generate keys more carefully, so that when the user asks for an n-bit
    key they always get an n-bit number instead of n-1. The latter was
    perfectly harmless but kept confusing users (closes: #661152).

25. By Colin Watson on 2012-01-03

Fix icon-debug.patch to print debug information to stderr, not stdout.

24. By Ilya Barygin on 2011-12-31

Don't FTBFS because of deprecated declarations.

23. By Colin Watson on 2011-12-12

* New upstream release.
  - [SECURITY] Wipe SSH keyboard-interactive replies from memory after
    authentication.

22. By Colin Watson on 2011-09-27

Add cross-compiling support.

21. By Colin Watson on 2011-07-13

* New upstream release.
* Update Vcs-* fields for Alioth changes.

20. By Colin Watson on 2011-05-09

* New experimental development snapshot.
  - Compiles cleanly with GCC 4.6 (closes: #625113, #625426).
* Consistently capitalise SSH in the package description when referring to
  the protocol (closes: #610486).

19. By Colin Watson on 2010-12-08

* New experimental development snapshot.
  - Add more possible baud rates to the Unix serial backend (closes:
    #606328).
* Add ${misc:Depends}.
* Remove deprecated Encoding keys from desktop files.
* Remove deprecated Application categories from desktop files.
* Build with GSSAPI support (using run-time library binding).

18. By Colin Watson on 2010-02-22

* New experimental development snapshot.
  - Console utilities send prompts to /dev/tty or failing that stderr, not
    to stdout (closes: #422295).
* Upgrade to debhelper v7.
* Move documentation from putty-tools to a new putty-doc package (closes:
  #472195).
* Add a watch file.
* Convert to source format 3.0 (quilt). No remaining Debian patches!