~ubuntu-branches/ubuntu/trusty/putty/trusty-security : changes

~ubuntu-branches/ubuntu/trusty/putty/trusty-security » Changes from revision 32

From Revision 32 to 13

Rev	Summary	Authors	Tags	Date
32	* SECURITY UPDATE: PuTTY did not properly wipe SSH-2 Private... * SECURITY UPDATE: PuTTY did not properly wipe SSH-2 Private Keys from system memory, which can allow local users to obtain sensitive information by reading the memory. (LP: #1467631) - debian/patches/private-key-not-wiped-2.patch: Add in fix patch from Debian 0.63-10 packaging. Thanks to Patrick Coleman for the original patch. - CVE-2015-2157	Thomas Ward	0.63-4ubuntu0.1	8 years ago
31	* Backport from upstream (Simon Tatham): * Backport from upstream (Simon Tatham): - Fix assertion failure in Unix PuTTYgen exports (LP: #1289176).	Colin Watson	0.63-4	10 years ago
30	* Use dh-autoreconf, with the aid of a few upstream patches ... * Use dh-autoreconf, with the aid of a few upstream patches to make things work with current autotools. * Backport upstream patch to add some assertions in sshzlib.c, fixing build with -O3.	Colin Watson	0.63-3	10 years ago
29	* Support parallel builds. * Support parallel builds. * Switch to git; adjust Vcs-* fields.	Colin Watson	0.63-2	10 years ago
28	* New upstream release. * New upstream release. - CVE-2013-4206: Buffer underrun in modmul could corrupt the heap. - CVE-2013-4852: Negative string length in public-key signatures could cause integer overflow and overwrite all of memory (closes: #718779). - CVE-2013-4207: Non-coprime values in DSA signatures can cause buffer overflow in modular inverse. - CVE-2013-4208: Private keys were left in memory after being used by PuTTY tools. - Allow using a bold colour and a bold font at the same time (closes: #193352). - Use a monotonic clock (closes: #308552). * Switch to the Autotools-based build system. * Upgrade to debhelper v9.	Colin Watson	0.63-1	10 years ago
27	* Backport from upstream (Ben Harris, Simon Tatham): * Backport from upstream (Ben Harris, Simon Tatham): - Avoid function pointer comparison when using clang.	Colin Watson	0.62-11	10 years ago
26	* Backport from upstream (Simon Tatham, closes: #701425): * Backport from upstream (Simon Tatham, closes: #701425): - Check the return values of setuid and friends. - Remove the half-hearted attempt to make the utmp helper process drop privileges just before dying of a fatal signal.	Colin Watson	0.62-10	11 years ago
25	* Backport from upstream (Simon Tatham): * Backport from upstream (Simon Tatham): - Fix handling of non-default numeric keypad modes when Num Lock is on (closes: #680261).	Colin Watson	0.62-9	11 years ago
24	* Backport from upstream (Simon Tatham): * Backport from upstream (Simon Tatham): - Support dead keys and compose sequences (closes: #221786, #250464).	Colin Watson	0.62-8	11 years ago
23	* Add System category to pterm.desktop (closes: #678126). * Add System category to pterm.desktop (closes: #678126). * Use dpkg-buildflags to enable hardening options.	Colin Watson	0.62-7	11 years ago
22	* Backport from upstream (Simon Tatham, Jacob Nevins): * Backport from upstream (Simon Tatham, Jacob Nevins): - Generate keys more carefully, so that when the user asks for an n-bit key they always get an n-bit number instead of n-1. The latter was perfectly harmless but kept confusing users (closes: #661152).	Colin Watson	0.62-6	12 years ago
21	Ignore failures to generate PNG icons too. Ignore failures to generate PNG icons too.	Colin Watson	0.62-5	12 years ago
20	* Ignore failures to generate XPM icons. It's not the end o... * Ignore failures to generate XPM icons. It's not the end of the world, and this fails on kFreeBSD due to some apparently undiagnosed imagemagick bug. * Drop icon-debug.patch, since it didn't especially help anyway.	Colin Watson	0.62-4	12 years ago
19	Fix icon-debug.patch to print debug information to stderr, n... Fix icon-debug.patch to print debug information to stderr, not stdout.	Colin Watson	0.62-3	12 years ago
18	* Avoid deprecated GLib functions. * Avoid deprecated GLib functions. * Add temporary debugging patch to try to figure out why the kfreebsd-amd64 build is failing.	Colin Watson	0.62-2	12 years ago
17	* New upstream release. * New upstream release. - [SECURITY] Wipe SSH keyboard-interactive replies from memory after authentication.	Colin Watson	0.62-1	12 years ago
16	Add cross-compiling support. Add cross-compiling support.	Colin Watson	0.61-2	12 years ago
15	* New upstream release. * New upstream release. * Update Vcs-* fields for Alioth changes.	Colin Watson	0.61-1	12 years ago
14	* New experimental development snapshot. * New experimental development snapshot. - Compiles cleanly with GCC 4.6 (closes: #625113, #625426). * Consistently capitalise SSH in the package description when referring to the protocol (closes: #610486).	Colin Watson	0.60+2011-05-09-1	13 years ago
13	* New experimental development snapshot. * New experimental development snapshot. - Add more possible baud rates to the Unix serial backend (closes: #606328). * Add ${misc:Depends}. * Remove deprecated Encoding keys from desktop files. * Remove deprecated Application categories from desktop files. * Build with GSSAPI support (using run-time library binding).	Colin Watson	0.60+2010-12-08-1	13 years ago

Older »