putty/putty.changes

159 lines
6.9 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

-------------------------------------------------------------------
Wed Mar 15 08:26:13 UTC 2017 - jengelh@inai.de
- Update to new upstream release 0.68
* resolve integer overflow in the ssh_agent_channel_data
[CVE-2017-6542, boo#1029256]
- Drop reproducible.patch, no longer applies
-------------------------------------------------------------------
Tue Mar 8 18:35:39 UTC 2016 - bwiedemann@suse.com
- Add reproducible.patch to fix build-compare
-------------------------------------------------------------------
Tue Mar 8 16:43:24 UTC 2016 - jengelh@inai.de
- Update to new upstream release 0.67
* resolved a security issue with the PSCP protocol implementation
-------------------------------------------------------------------
Mon Nov 9 08:47:47 UTC 2015 - jengelh@inai.de
- Update to new upstream release 0.66
* Resolve integer overflow, buffer underrun in terminal emulator's
ECH handling. [CVE-2015-5309, bnc#954191]
* Resolve format string vulnerabilities
-------------------------------------------------------------------
Mon Jul 27 12:16:00 UTC 2015 - jengelh@inai.de
- Update to new upstream release 0.65
* Cryptography speedup on 64-bit Unix platforms by using gcc and
clang's __uint128_t built-in type.
* Bug fix: PSFTP now returns a failure exit status if a command
fails in a batch-mode script.
* Bug fix: ESC [ 13 t can no longer elicit an invalid escape
sequence as a response.
-------------------------------------------------------------------
Wed May 13 13:21:36 UTC 2015 - aj@ajaissle.de
- Build icons and add a .desktop file for putty
-------------------------------------------------------------------
Mon Mar 2 10:19:15 UTC 2015 - jengelh@inai.de
- Update to new upstream release 0.64
* Security fix: PuTTY no longer retains the private half of users'
keys in memory by mistake after authenticating with them.
[bnc#920167] (CVE-2015-2157)
* Support for SSH connection sharing, so that multiple instances of
PuTTY to the same host can share a single SSH connection instead
of all having to log in independently.
* Bug fix: IPv6 literals are handled sensibly throughout the suite,
if you enclose them in square brackets to prevent the colons
being mistaken for a :port suffix.
- Remove 0001-Revert-the-default-for-font-bolding-style.patch
(merged upstream), putty-04-nodate.diff (no longer needed).
-------------------------------------------------------------------
Tue Sep 23 15:43:40 UTC 2014 - jengelh@inai.de
- Drop gpg-offline build-time requirement; this is now handled by
the local source validator
-------------------------------------------------------------------
Wed Aug 7 09:28:25 UTC 2013 - jengelh@inai.de
- Add 0001-Revert-the-default-for-font-bolding-style.patch
(upstream patch fixing a cosmetic change introduced in 0.63)
- Add Conflict tag against pssh package (Parallel SSH) due to
conflicting files in /usr/bin
-------------------------------------------------------------------
Tue Aug 6 19:47:43 UTC 2013 - jengelh@inai.de
- Do signature verification
-------------------------------------------------------------------
Tue Aug 6 19:09:06 UTC 2013 - andreas.stieger@gmx.de
- update to 0.63
* Security fix: prevent a nefarious SSH server or network attacker
from crashing PuTTY at startup in three different ways by
presenting a maliciously constructed public key and signature.
[bnc#833567] CVE-2013-4852
* Security fix: PuTTY no longer retains the private half of users'
keys in memory by mistake after authenticating with them.
* Revamped the internal configuration storage system to remove all
fixed arbitrary limits on string lengths. In particular, there
should now no longer be an unreasonably small limit on the number
of port forwardings PuTTY can store.
* Forwarded TCP connections which close one direction before the
other should now be reliably supported, with EOF propagated
independently in the two directions. This also fixes some instances
of forwarding data corruption (if the corruption consisted of
losing data from the very end of the connection) and some instances
of PuTTY failing to close when the session is over (because it
wrongly thought a forwarding channel was still active when it was
not).
* The terminal emulation now supports xterm's bracketed paste mode
(allowing aware applications to tell the difference between typed
and pasted text, so that e.g. editors need not apply inappropriate
auto-indent).
* You can now choose to display bold text by both brightening the
foreground colour and changing the font, not just one or the other.
* PuTTYgen will now never generate a 2047-bit key when asked for 2048
(or more generally n1 bits when asked for n).
* Some updates to default settings: PuTTYgen now generates 2048-bit
keys by default (rather than 1024), and PuTTY defaults to UTF-8
encoding and 2000 lines of scrollback (rather than ISO 8859-1 and
200).
* Unix: PSCP and PSFTP now preserve the Unix file permissions, on
copies in both directions.
* Unix: dead keys and compose-character sequences are now supported.
* Unix: PuTTY and pterm now permit font fallback (where glyphs not
present in your selected font are automatically filled in from other
fonts on the system) even if you are using a server-side X11 font
rather than a Pango client-side one.
* Bug fixes too numerous to list, mostly resulting from running the
code through Coverity Scan which spotted an assortment of memory
and resource leaks, logic errors, and crashes in various circumstances.
- packaging changes:
* run make from base directory
* run tests
* remove putty-01-werror.diff (currently not needed)
* remove putty-02-remove-gtk1.diff, putty-05-glib-deprecated.diff,
putty-06-gtk2-indivhdr.diff (no longer needed)
* refresh putty-03-config.diff
* remove autoconf calls and requirements
* package HTML documentation
* package LICENCE file
-------------------------------------------------------------------
Sun Dec 11 14:04:30 UTC 2011 - andreas.stieger@gmx.de
- update to upstream 0.62:
* Security fix: PuTTY no longer retains passwords in memory by
mistake.
* Bug fix: Pageant now talks to both new-style clients (0.61 and
above) and old-style (0.60 and below).
* Bug fix: PuTTY no longer prints a spurious "Access denied"
message when GSSAPI authentication fails.
* Bug fix: PSCP and PSFTP now honour nonstandard port numbers in
SSH saved sessions.
* Bug fix: Pageant no longer leaks a file handle when an
authentication fails.
* Bug fix: PuTTYtel no longer crashes when saving a session.
* Bug fix: PuTTY now draws underlines under the underlined text
instead of sometimes putting them somewhere off to the right.
* Bug fix: PuTTY now should not draw VT100 line drawing characters
at the wrong vertical offset.
- fix SLE build
-------------------------------------------------------------------
Tue Jul 26 23:25:28 UTC 2011 - jengelh@medozas.de
- Initial package for build.opensuse.org