Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package putty for openSUSE:Factory checked in at 2026-08-18 16:36:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/putty (Old) and /work/SRC/openSUSE:Factory/.putty.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "putty" Tue Aug 18 16:36:10 2026 rev:36 rq:1371607 version:0.85 Changes: -------- --- /work/SRC/openSUSE:Factory/putty/putty.changes 2026-05-25 22:00:05.925098520 +0200 +++ /work/SRC/openSUSE:Factory/.putty.new.1258/putty.changes 2026-08-18 16:36:47.496590556 +0200 @@ -1,0 +2,15 @@ +Mon Aug 17 16:57:53 UTC 2026 - Jan Engelhardt <[email protected]> + +- Update to release 0.85 + * Fixed a remotely triggerable use-after-free in Pageant. + * Fixed a remotely triggerable buffer overflow if the OpenSSH + encrypt-then-MAC cipher modes are in use. (Only used if a + server supports nothing else.) + * Fixed a buffer overflow in private key decryption, if the + private key is constructed maliciously. (Only triggerable on + purpose if you let somebody else generate a key for you.) + * Denial-of-service security fixes for where a server could + trigger a tight loop in PuTTY, and even a MITM can make it + consume unlimited memory at startup. + +------------------------------------------------------------------- Old: ---- putty-0.84.tar.gz putty-0.84.tar.gz.gpg New: ---- putty-0.85.tar.gz putty-0.85.tar.gz.gpg ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ putty.spec ++++++ --- /var/tmp/diff_new_pack.dxAqRh/_old 2026-08-18 16:36:48.368621800 +0200 +++ /var/tmp/diff_new_pack.dxAqRh/_new 2026-08-18 16:36:48.369621835 +0200 @@ -17,7 +17,7 @@ Name: putty -Version: 0.84 +Version: 0.85 Release: 0 Summary: SSH client with optional GTK-based terminal emulator frontend License: MIT ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.dxAqRh/_old 2026-08-18 16:36:48.402623018 +0200 +++ /var/tmp/diff_new_pack.dxAqRh/_new 2026-08-18 16:36:48.407623197 +0200 @@ -1,5 +1,5 @@ -mtime: 1779723414 -commit: f50cd97ff173699abf903bf8091c660979771d9cb084d9108292912118cdea3b +mtime: 1786985961 +commit: da7f34de8862c6c9801bbfc44bb5dfc7ccfca18f8c819f21568a5203262c5e6f url: https://src.opensuse.org/jengelh/putty revision: master ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-17 18:59:21.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ putty-0.84.tar.gz -> putty-0.85.tar.gz ++++++ ++++ 2603 lines of diff (skipped)
