-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Jul 2024 10:44:03 +0000 Source: putty Binary: pterm pterm-dbgsym putty putty-dbgsym putty-tools putty-tools-dbgsym Architecture: mipsel Version: 0.78-2+deb12u2 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Bastien Roucariès Description: pterm - PuTTY terminal emulator putty - Telnet/SSH client for X putty-tools - command-line tools for SSH, SCP, and SFTP Changes: putty (0.78-2+deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * Cherry-pick from upstream: - Add an extra HMAC constructor function - Fix CVE-2024-31497: biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words, an adversary may already have enough signature information to compromise a victim's private key, even if there is no further use of vulnerable PuTTY versions. * Run test/cryptsuite.py during build. Checksums-Sha1: b9ec4bc1c0c9e02dcac7b8bad57181bbd0e4f70f 723476 pterm-dbgsym_0.78-2+deb12u2_mipsel.deb 8304c05fcd5baea3ed9dbef068a87aeb341d376e 213888 pterm_0.78-2+deb12u2_mipsel.deb 346631b9d8c8c48892eb069491b21e69d0f82468 2415068 putty-dbgsym_0.78-2+deb12u2_mipsel.deb c3e0f4dbd3c20a4269a177b156eee07cf5a24557 4974768 putty-tools-dbgsym_0.78-2+deb12u2_mipsel.deb f33d7218e158846f1d1ad3dd0798f8f6fa46be84 609736 putty-tools_0.78-2+deb12u2_mipsel.deb 5863615c94e0960341fa6ce40bbe68648ce32bdc 16273 putty_0.78-2+deb12u2_mipsel-buildd.buildinfo 2bef309278f0e602299117af1089fc2bba22dd87 509676 putty_0.78-2+deb12u2_mipsel.deb Checksums-Sha256: 1b567419dafdff8e2b63949c90c0021365584f93993c768e3ac7dff9459493fc 723476 pterm-dbgsym_0.78-2+deb12u2_mipsel.deb aee3b543710f64397df1c8b80ddf5986725aab59694a9f7451011bfe1d418de4 213888 pterm_0.78-2+deb12u2_mipsel.deb 297770295c91ad2a830784cffc4a2e1aa8e3174dfa134bed37211eb35148cbf7 2415068 putty-dbgsym_0.78-2+deb12u2_mipsel.deb fdadf92d535e2450e1836815dac2814e1a96bcfc9f85cb300e85c540a9ff3a18 4974768 putty-tools-dbgsym_0.78-2+deb12u2_mipsel.deb 42cfac7a176afb78d61d901adec90f5b3f71b0d013a74ebd2e9e01abce6c7ac4 609736 putty-tools_0.78-2+deb12u2_mipsel.deb 1a1c950ccbbd5a2bf0774516c28faf2e8bdc25d2679bb6a2c972d357de49a4b7 16273 putty_0.78-2+deb12u2_mipsel-buildd.buildinfo b08179b5ea3cc12a89ef7094651d62eaf61ec0b44e532a037fa92eb8140bc4ce 509676 putty_0.78-2+deb12u2_mipsel.deb Files: 0bd246a49fd000c918b1f04a272a67fb 723476 debug optional pterm-dbgsym_0.78-2+deb12u2_mipsel.deb 06c607c0da36f18b394abc3d151c816b 213888 x11 optional pterm_0.78-2+deb12u2_mipsel.deb e9f9ffedca3bc44f6c5c116ca14b5455 2415068 debug optional putty-dbgsym_0.78-2+deb12u2_mipsel.deb fd879a23b7221e0bc79d401af49f4430 4974768 debug optional putty-tools-dbgsym_0.78-2+deb12u2_mipsel.deb 4ec0822dc46321e5b6f3efedc7f8be57 609736 net optional putty-tools_0.78-2+deb12u2_mipsel.deb 2684c1f6eb3c441c815f37d117d8c3c9 16273 net optional putty_0.78-2+deb12u2_mipsel-buildd.buildinfo c2dd5f6d740484db0897ee473fe0034a 509676 net optional putty_0.78-2+deb12u2_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEunmvxaaGKuI+hxxClmZGXOM83t8FAmbGdK4ACgkQlmZGXOM8 3t99exAAxaZ8CYlcy/yr9Y8WjKtXab69OI39W0ak5aMC1BYB6U/VtvJBn3uwWIJ2 lE3Jr8Bjh9aS8ktDtISlSPdEW3socP2e7TjvS/nQlkhLL2gEcwQJyvNHiyr+t7BK 0Yk7QBptnwZBhGPqeg9UBZQJJMHmkxeGk2Tmx296rH+lmVL8CHJppkCGxedeXGVN jM7OyMFbQjY2rcHj0LWXvqHS88w1mXDzbdTBkqMo9giY6SRHrTTmf45PzubnJ6a3 amkwSN2HSRtAxcl2Kh+fVbNuSh9fWH4QBizryuB36jwfpLc61/HvST85JnGV+669 tdYyV5B4CYtZYjta4icb2QB1rvn03Q55KjjbOYKEMc5oOSjaP4wcu7m8vjHVQwVB MNcVI4l6dQGJ9xSXliL63VKEYIBDJgxbgIi6QMvAIVM+/5kF4LlMKebmvGcffXXP xJK+EHN6eri18ZhIjW3TECHuClOyFFG+5R26B0eobr3QybIQc3ruW6oFslJ1SExw 7CkNibvGhfTyTzwa7k4vo030LABW9OKagxRUbUrkSmtojaGB2PgZgrDaJZpypz8z p3qvfRVqbZhWNwcBMEwBaRHFqUrNwHXE28eMTRAER8VsEpgWlTQPIlCGqUXgNPAK mvZAmMGnOUM2rKm545emOXFrSFrHfS8V9gRd8ejOmLBdFdHCxew= =tD9P -----END PGP SIGNATURE-----