openSUSE-SU-2019:1985-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2019:1985-1

Published

2019-08-21T14:18:21Z

Modified

2019-08-21T14:18:21Z

Summary

Recommended update for putty

Details

This update for putty fixes the following issues:

Update to new upstream release 0.72 [boo#1144547, boo#1144548]

Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking.
Fixed a vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP and PSCP) if a malicious program can impersonate Pageant.
Fixed a crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.72-lp151.3.3.1

{
    "binaries": [
        {
            "putty": "0.72-lp151.3.3.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1985-1.json"

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.72-lp151.3.3.1

{
    "binaries": [
        {
            "putty": "0.72-lp151.3.3.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1985-1.json"