-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 18 Dec 2023 19:13:57 +0000 Source: putty Binary: pterm pterm-dbgsym putty putty-dbgsym putty-tools putty-tools-dbgsym Architecture: amd64 Version: 0.78-2+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Colin Watson Description: pterm - PuTTY terminal emulator putty - Telnet/SSH client for X putty-tools - command-line tools for SSH, SCP, and SFTP Changes: putty (0.78-2+deb12u1) bookworm-security; urgency=medium . * CVE-2023-48795: Cherry-pick from upstream: - Fix check for "ext-info-s". - Factor out the check for ext-info-* keyword. - Refactor confirm_weak to use SeatDialogText. - Support OpenSSH's new strict kex feature. - Add missing flags to AES selector vtables. - Warn about Terrapin vulnerability for unpatched servers. - Remove fatal-error reporting from scan_kexinits. - Terrapin warning: say if reconfiguration can help. Checksums-Sha1: ee4333f6602f8b5ee900b0cce5f3f6c6d35114f1 699600 pterm-dbgsym_0.78-2+deb12u1_amd64.deb a52e54f9c2d779b07adfc8fa74523a7d09889a07 229568 pterm_0.78-2+deb12u1_amd64.deb 06dde3847b3e5f69736cb642854a5c086422b8b8 2525516 putty-dbgsym_0.78-2+deb12u1_amd64.deb 305ac271329ef8e38f5e652999670afc08b4d59b 5512320 putty-tools-dbgsym_0.78-2+deb12u1_amd64.deb 80069027c04502cd2f6ce3c6356bf7b37b60ec27 610692 putty-tools_0.78-2+deb12u1_amd64.deb f333d5c56dc8296a5315922afc68528e611d911d 16337 putty_0.78-2+deb12u1_amd64-buildd.buildinfo b9c004fa6ec5e8288239c7793bfc5d7e09811dc1 534956 putty_0.78-2+deb12u1_amd64.deb Checksums-Sha256: 7fbc5c196b8a0a4dbd7fd07b60faa98c4902cdf8275a4553cb48a815115fefcc 699600 pterm-dbgsym_0.78-2+deb12u1_amd64.deb 5b7c563e8bc86db91876483d5e52f33ed558992b03478aa3a416a3d551a52a57 229568 pterm_0.78-2+deb12u1_amd64.deb 75cf894edcc400993d7733684fa5347a4aa26b59b35dd006fbbc08bc2655c45c 2525516 putty-dbgsym_0.78-2+deb12u1_amd64.deb 9d3aa9b70b254205d7b0beb59504c4b99814f15bebb3eac3fceb18766c6bb48d 5512320 putty-tools-dbgsym_0.78-2+deb12u1_amd64.deb 38a894cd0e3a7b891f5ccaa6efa68011d7fe14bffda1b8b29bd50112ea93a666 610692 putty-tools_0.78-2+deb12u1_amd64.deb 997319d3a619a15b49c32ef81636cb856c95f25970cae66c551946171bccd551 16337 putty_0.78-2+deb12u1_amd64-buildd.buildinfo 3d7102dd06109c8698e313a33e11d1586e2ae8675f1b9b76414d1474e49ff0a4 534956 putty_0.78-2+deb12u1_amd64.deb Files: 349f029985971cb11d24cf415033b383 699600 debug optional pterm-dbgsym_0.78-2+deb12u1_amd64.deb e1532eec8e1163582a1780c62ef3f925 229568 x11 optional pterm_0.78-2+deb12u1_amd64.deb 2270e331e27f2b8f265f632de3e57408 2525516 debug optional putty-dbgsym_0.78-2+deb12u1_amd64.deb 5d26d9cf69f21a5b3655e1084dc7546e 5512320 debug optional putty-tools-dbgsym_0.78-2+deb12u1_amd64.deb 6bf324cd57b6dac1099d579811bf455e 610692 net optional putty-tools_0.78-2+deb12u1_amd64.deb dcde9348ab256f645e9160c84d833465 16337 net optional putty_0.78-2+deb12u1_amd64-buildd.buildinfo a449eec4cff67e0fc79224e441808935 534956 net optional putty_0.78-2+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE85oDfSLnwLkvY4Ibj5YjFeDZ0JMFAmWAosIACgkQj5YjFeDZ 0JMFJxAAo3B5tKDIsZioI+NqxD6ZHQ6dTOgHSqr+Y5swxQpNuG9PvXKYCVoDOU1g CwQGcjYJOJn7TDtzVGnNjmAqgROj7l8ln66MiCpNBsbqWAlaTuK4rQwQGmhC4Ze+ wigd03ZM4QOyW/xvk9ZScSzkwJuXnoUtxmUhbrIfP0CU3p0KtPZxbeJ+xxA/CsFi NfFrRiwmtGwC0LI7qnf5Y4rJ98CVj7CkiC1y2F5hdxv9AV57W5EFMrptONkJb7nJ 7oaTEDKeJaVnIirUZTj5BVDxNC0cMjWm9AG1vEp13+Mg8HFfYO+iL18s3C6mdCLC NAqW7A19RwDdIPOn46CE6JKpDbZKYbVl6VWZ1DnjYutxxzR7p1/BlbAfmUESzEmY gSc8csGuwEu6Y4BJGZL+OUNZ8ko2v2eJBngwtFhMytj1KqncV9nu/Bm9Ala3VO+7 w96BXmEhiIYiIcPcfwexfKAHAdRPHUc+hG89YFmkgNAswauDyDr4AY4Od17hZGSz d+M0KrPAQ+9+foS6Ht2CzWk8FdmJl4L1mXkmqsDcW6x20T2x/SUuVM1YaMnBRKQA wH+bJt0S5Stnqi+URamkuf9ctZCug+cTuNkh7u5R/Xe6AppbCdaR6NY+XJ4+QobJ zvhsZOWxeonIBMAvc6yi5EoBIZx+e0/X00uQf7VxS/HJxgODcxU= =lRRf -----END PGP SIGNATURE-----