-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Jul 2024 10:44:03 +0000 Source: putty Binary: pterm pterm-dbgsym putty putty-dbgsym putty-tools putty-tools-dbgsym Architecture: mips64el Version: 0.78-2+deb12u2 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Bastien Roucariès Description: pterm - PuTTY terminal emulator putty - Telnet/SSH client for X putty-tools - command-line tools for SSH, SCP, and SFTP Changes: putty (0.78-2+deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * Cherry-pick from upstream: - Add an extra HMAC constructor function - Fix CVE-2024-31497: biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words, an adversary may already have enough signature information to compromise a victim's private key, even if there is no further use of vulnerable PuTTY versions. * Run test/cryptsuite.py during build. Checksums-Sha1: 578ffd448e25d7a0cbb67deb4cc2d5d0218bb497 729556 pterm-dbgsym_0.78-2+deb12u2_mips64el.deb 253fb2f8b8d6a751877d5b384c37bf582066f422 213716 pterm_0.78-2+deb12u2_mips64el.deb aad21c0c46627e870f792d1ef3efc9f8d3dce9bc 2419932 putty-dbgsym_0.78-2+deb12u2_mips64el.deb 5086f2575ac19a9a95978a5d12af2c0191899ae2 4970776 putty-tools-dbgsym_0.78-2+deb12u2_mips64el.deb baedbf5c68cc0ee6b34ec16f93ac45b77cb7b556 602128 putty-tools_0.78-2+deb12u2_mips64el.deb 975c701ec556cb7b716a7761f005138a776a2a22 16317 putty_0.78-2+deb12u2_mips64el-buildd.buildinfo 2a11ca394716b89985c4b358f3c4769a6b323b35 497628 putty_0.78-2+deb12u2_mips64el.deb Checksums-Sha256: 26dd5a848d1dfcac54b923c5ca591b053ee19f2fbf4df0558c3ee404f7da4851 729556 pterm-dbgsym_0.78-2+deb12u2_mips64el.deb 8bbad50fc1d71af9d9c94f139087e932c151ed15bffed96ee19f94426d0cd5a9 213716 pterm_0.78-2+deb12u2_mips64el.deb 46ce7ffae14b563df27c3eb11d6911979ca3541ecb98f79978e969d871d12efe 2419932 putty-dbgsym_0.78-2+deb12u2_mips64el.deb e3219e6f6dd074cedcde139525029711b00628904f8342132de7793f79b3f8cf 4970776 putty-tools-dbgsym_0.78-2+deb12u2_mips64el.deb e18fdef0856959bffdfa96e68bb81111e5b5f4a39c76a8581bbb242fe0638a18 602128 putty-tools_0.78-2+deb12u2_mips64el.deb c69a9576ecb4827c5177c24214a7c0eeb318f85cc0a100c43b238d405b19fdd3 16317 putty_0.78-2+deb12u2_mips64el-buildd.buildinfo b59e2950cd63ac6518488618d6ca4fc3c92f29c4420ed8297f59ba89f8c156f9 497628 putty_0.78-2+deb12u2_mips64el.deb Files: bbcb9e459ccd744d28a29c6cd059d99e 729556 debug optional pterm-dbgsym_0.78-2+deb12u2_mips64el.deb 6a5b23d39f3b19632bf37bdd8d2596bc 213716 x11 optional pterm_0.78-2+deb12u2_mips64el.deb 961b867e0730fd9b30545c5998ee58eb 2419932 debug optional putty-dbgsym_0.78-2+deb12u2_mips64el.deb 2490c894cbb26eda7b17ff3657be0482 4970776 debug optional putty-tools-dbgsym_0.78-2+deb12u2_mips64el.deb 642cdac48f75425879a6421ecf38a064 602128 net optional putty-tools_0.78-2+deb12u2_mips64el.deb e388097e6f731b9ad5d9ca4e550e6134 16317 net optional putty_0.78-2+deb12u2_mips64el-buildd.buildinfo d58dae32291bffeccabb4c0a04cff5ce 497628 net optional putty_0.78-2+deb12u2_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEEmZlxOBLdXDBxnwAL00bee7O74EFAmbGaScACgkQL00bee7O 74H4mQ/9EtCisoElZtxaiJGPSOL+Yg6malQYR8aE/VTEayYjvxGJOHreq1dfkdKs YiToGZ692yFZ1GlAINVpjSfUPJS7ycQ+CD8ARs4I7/1xIcWIuB4r6nJLLItFmVCU jKuK1aRAcSoxCPou9VAaRnK3zvrqRZh2jItI0G8v0hzTKm4Wgo6gQLVKtSP8uybF so7YrKXF0x4Mf/tU8WYDvxKU2Iorce7xRUP3DKvdd2e0yLOaFGXx1fiUis869WZl s2lg6HHeNapU0X/gpp3RXo3g91+yS+1pujrdwCzS5RRBk3AyuCE7kNZkCwPItXWS Ae9BgRmk9MC8juILfTxMViH0EWZ545el16It4f3w5nD8CzioQIgrq2hCNZoS1EVC Ydm4TuXjRg7bMyd20HrUJdnzrDiklIyJ1MjoSEm03PhIgUYrVAAX4ZhYE579/YLv 8MeKZY+pQwlUtGZESmZtgX/Ggg1KnOED4PvKwHSVYUEDysupoerggGDYp+i895Oq 1IBsLwYgc4yyWp3Q/5MfjOHFaNu5L1R/F6/Ck71kVppzax/kLG3pAbjlX+rmKv+7 JgMD3NmItdCEdIeGSg/ZGQe72xyacQGR257sIMfpNYYn07YMqYjWOXB+WZ9a4bsO +7JKcZ8JuPl8ccg1W7EPCygeQebeiJ+vZpRxYerIkN2rYk8DWR4= =UmXM -----END PGP SIGNATURE-----