Mon Apr 15 21:55:23 2024 UTC (61d)
putty: update to 0.81.

PuTTY 0.81, released today, fixes a critical vulnerability
CVE-2024-31497 in the use of 521-bit ECDSA keys (ecdsa-sha2-nistp521).
If you have used a 521-bit ECDSA private key with any previous
version of PuTTY, consider the private key compromised: remove the
public key from authorized_keys files, and generate a new key pair.

However, this only affects that one algorithm and key size. No
other size of ECDSA key is affected, and no other key type is
affected.


(wiz)
diff -r1.83 -r1.84 pkgsrc/security/putty/Makefile
diff -r1.37 -r1.38 pkgsrc/security/putty/distinfo
cvs diff -r1.83 -r1.84 pkgsrc/security/putty/Makefile (expand / switch to context diff)
--- pkgsrc/security/putty/Makefile 2024/04/07 07:34:57 1.83
+++ pkgsrc/security/putty/Makefile 2024/04/15 21:55:23 1.84
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.83 2024/04/07 07:34:57 wiz Exp $
+# $NetBSD: Makefile,v 1.84 2024/04/15 21:55:23 wiz Exp $
 
-DISTNAME=	putty-0.80
-PKGREVISION=	2
+DISTNAME=	putty-0.81
 CATEGORIES=	security
 MASTER_SITES=	http://the.earth.li/~sgtatham/putty/${PKGVERSION_NOREV}/
cvs diff -r1.37 -r1.38 pkgsrc/security/putty/distinfo (expand / switch to context diff)
--- pkgsrc/security/putty/distinfo 2023/12/18 15:57:00 1.37
+++ pkgsrc/security/putty/distinfo 2024/04/15 21:55:23 1.38
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.37 2023/12/18 15:57:00 wiz Exp $
+$NetBSD: distinfo,v 1.38 2024/04/15 21:55:23 wiz Exp $
 
-BLAKE2s (putty-0.80.tar.gz) = c9e95c3ef9118d17c5c4c185db5a4c4b5d9e7dc5ff0d598e20feba674a8266ff
-SHA512 (putty-0.80.tar.gz) = c8a6b6fa54ecd8bcf4ec274fef51343dd9996e6458b250b5555c4dc88ded25e87f97277da482c29858510e65635112d541f559ab683635bd950572d850129f90
-Size (putty-0.80.tar.gz) = 2831433 bytes
+BLAKE2s (putty-0.81.tar.gz) = c6e77fbf456bb5f43d2d65689e8d51d664962e715daef3373d5286a6c2676a65
+SHA512 (putty-0.81.tar.gz) = d86f2fd0e126b18275d58cf64334b3b27c450899a1c2be2502de9faa2ef58f7fc8efc5d45f25c8395623f1e21917aa02407343bb2fee44c4c00b9f81267d5ecd
+Size (putty-0.81.tar.gz) = 2844616 bytes
 SHA1 (patch-ldisc.c) = cf31a65f920a3ea9b4a70602e4b2fd4d5df8d3e8
 SHA1 (patch-terminal.c) = 690d9021b14947ae24c68ecff6781ad255ab7a70
 SHA1 (patch-timing.c) = a6a492fc8b22c58e2973c854bffa4c8bf71eb6a7