-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Jul 2024 10:44:03 +0000 Source: putty Binary: pterm pterm-dbgsym putty putty-dbgsym putty-tools putty-tools-dbgsym Architecture: ppc64el Version: 0.78-2+deb12u2 Distribution: bookworm Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Bastien Roucariès Description: pterm - PuTTY terminal emulator putty - Telnet/SSH client for X putty-tools - command-line tools for SSH, SCP, and SFTP Changes: putty (0.78-2+deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * Cherry-pick from upstream: - Add an extra HMAC constructor function - Fix CVE-2024-31497: biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words, an adversary may already have enough signature information to compromise a victim's private key, even if there is no further use of vulnerable PuTTY versions. * Run test/cryptsuite.py during build. Checksums-Sha1: 8ccb83af02f1691c23a81f5eda7c885b05d194a4 713628 pterm-dbgsym_0.78-2+deb12u2_ppc64el.deb 5c58c4baddc6a0cf8f7fa1500dfd55d189dbc939 244504 pterm_0.78-2+deb12u2_ppc64el.deb 930290b4c5a78e950a8e07fa2020789f2f5ddb9f 2329884 putty-dbgsym_0.78-2+deb12u2_ppc64el.deb 1a0f9addc4d0857ec87c321a706b709b89c29b5e 4755160 putty-tools-dbgsym_0.78-2+deb12u2_ppc64el.deb 6dd13a873ce86b6d1fbe0b799641672b6b2f67b3 643496 putty-tools_0.78-2+deb12u2_ppc64el.deb 14021c3087331a6051d08488790e5b5e3c7e528f 16452 putty_0.78-2+deb12u2_ppc64el-buildd.buildinfo 71b0458988679f5650ea88f32bbcc0b97509fe37 565660 putty_0.78-2+deb12u2_ppc64el.deb Checksums-Sha256: 235eff2c40c72197af18a1b1569908ffa5cc690fe673ec2e7ec3a314aa3c5f9c 713628 pterm-dbgsym_0.78-2+deb12u2_ppc64el.deb 3dfa3a45cd004648f294caec5a088f009083a32e980e8fb0a6714e91dbbbbec9 244504 pterm_0.78-2+deb12u2_ppc64el.deb 1b30f855a5d835626f5743e6d9b075b0b8b87c206d299998ee998eee2c48a7a8 2329884 putty-dbgsym_0.78-2+deb12u2_ppc64el.deb b64366c5bb68652c36e8b3eb340dc4dea7d920f5b2f48cc9b3121b98bcc09911 4755160 putty-tools-dbgsym_0.78-2+deb12u2_ppc64el.deb 54925931c95a18ab05a5606dff8a3760042d050cb067fa7b50644b16d9915761 643496 putty-tools_0.78-2+deb12u2_ppc64el.deb 297a3260a24b0fb4fd94656a9f520c98e0f30c69ac7eef639fb8564f100dbdf6 16452 putty_0.78-2+deb12u2_ppc64el-buildd.buildinfo 8d58fec9e688aa8d85fa2071709b571cf2fa02a80022295b0d6cfe38d11fbf7e 565660 putty_0.78-2+deb12u2_ppc64el.deb Files: f3d45cc0799f6bdfbccbd639e4ec92b3 713628 debug optional pterm-dbgsym_0.78-2+deb12u2_ppc64el.deb 70c07e7c0c143d34d9ef969898088259 244504 x11 optional pterm_0.78-2+deb12u2_ppc64el.deb cdbc298e01af5d1d8d3e3bbed9f78852 2329884 debug optional putty-dbgsym_0.78-2+deb12u2_ppc64el.deb 03d2c32a7c0cbac8eac33caf71000299 4755160 debug optional putty-tools-dbgsym_0.78-2+deb12u2_ppc64el.deb c8d2d0637108a61092255a081f247901 643496 net optional putty-tools_0.78-2+deb12u2_ppc64el.deb 1da24a527c61cd5704031caff5034abc 16452 net optional putty_0.78-2+deb12u2_ppc64el-buildd.buildinfo cc79a8442e050e2e05e04bdfe164b3c6 565660 net optional putty_0.78-2+deb12u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0YcVZfZCWQv84jpRNcqbeolus3sFAmbGZi0ACgkQNcqbeolu s3slCg/9FVScKPTemE1qrUeWkBH55ibRfl17VIXDF0qAMS+I3RJouADrFlMOC33+ nu9cjwOdRw3P0A7Watnq5U3IG2TZoKE8lMTQpUgIpcWmLgawYCT2clj7Kl5N+Zai TzEo2nmQk9Pj8BurJmFGSTS/DP/Jh5hdvOVKgbOIxuaaRvx9u1PwOKcYMkwafFdR HbFf5vWvvzPHprkyUiGockKJI+bmZGGjQk5SItam/ty1RjDyDgLmfm0Y87o1MNiL Yorh9LgyQ6fhCJxCsy8D1DdskwWJTuNK85EvbiGhZlARL6pCxmO+IDUnUSKRQE8p OM29wpFKl1PE9gI/e3MpFn5xTUzf+hJP3BJhwdJwOKoBC+ZobHdHHOH3aLZWLNo9 qMqzbZFxjdFV7UbuQ4MGlOVsOlkNsHykdRffIzQX0w0bWcW+bUkOQQUKwsvcDzqS C7AtyMZ2tJ4r8unENyEnWnRt5riZLTGP0cnnsDfNJmC4B5mwUAEsklM9eOECki/D gzl/Cj1AHR5HXpDHpWM6G+HZsmt2oad5uFBNBdWOHGMicOxIsHpE89bFJxA3zs3F RY69GXs8tWX6eGwnrXcVMaEOhfn7ocbt+JK2+rZKCKyWy5FwqEK/XeSU83wRECbf 5EjxG79vgv6IFQcTMJckCAzMKfCqDuWb9irsRYyplfvufk/wIP4= =i0ZT -----END PGP SIGNATURE-----