openSUSE-SU-2026:20851-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20851-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20851-1
Published
2026-05-31T10:28:37Z
Modified
2026-06-02T08:45:08Z
Summary
Security update for putty
Details

This update for putty fixes the following issues:

Changes in putty:

  • Update to release 0.84
    • Fixed a remotely triggerable double-free in RSA key exchange.
    • Fixed a remotely triggerable crash (assertion failure - program termination) in NIST ECDSA signature verification.
    • Fixed marking of Telnet and Rlogin session data with a trust sigil after you authenticated to a proxy (possibly allowing a server to spoof a repeat proxy password prompt).
    • New ability to run a specified command before starting the connection, e.g. to perform wake-on-LAN or a port knock.
    • Display 'pre-edit text', showing the progress of using multiple keystrokes to compose a single Unicode character.
    • Improved support for to running the GUI tools on Wayland (fixed startup issues and tuned performance).
    • Configuring a SSH certificate authority used to fail unless you manually made a config directory, now fixed.
    • Fixed a spurious "Network error: Socket is not connected" when authenticating to some HTTP proxies.
References

Affected packages