openSUSE-SU-2019:2017-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2019:2017-1

Published

2019-08-26T18:19:50Z

Modified

2019-08-26T18:19:50Z

Summary

Recommended update for putty

Details

This update for putty fixes the following issues:

Update to new upstream release 0.72 [boo#1144547, boo#1144548]

Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking.
Fixed a vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP and PSCP) if a malicious program can impersonate Pageant.
Fixed a crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange.

This update was imported from the openSUSE:Leap:15.0:Update update project.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.72-bp151.4.3.1

{
    "binaries": [
        {
            "putty": "0.72-bp151.4.3.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:2017-1.json"

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.72-bp151.4.3.1

{
    "binaries": [
        {
            "putty": "0.72-bp151.4.3.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:2017-1.json"