-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 19 Jun 2024 21:49:08 +0000
Source: putty
Architecture: source
Version: 0.74-1+deb11u1~deb10u2
Distribution: buster-security
Urgency: critical
Maintainer: Colin Watson <cjwatson@debian.org>
Changed-By: Bastien Roucariès <rouca@debian.org>
Changes:
putty (0.74-1+deb11u1~deb10u2) buster-security; urgency=critical
.
* LTS team upload
* Fix CVE-2024-31497: biased ECDSA nonce generation allows an attacker
to recover a user's NIST P-521 secret key via a quick attack in
approximately 60 signatures. In other words, an adversary
may already have enough signature information to compromise a victim's
private key, even if there is no further use of vulnerable PuTTY
versions.
Checksums-Sha1:
157c2b648c73fe92e52a0b6d64262e26014195e2 2395 putty_0.74-1+deb11u1~deb10u2.dsc
63ea869b7ca57866fbdb9d68858c168976b69e02 55784 putty_0.74-1+deb11u1~deb10u2.debian.tar.xz
2e606157bb426619fa0c09a13507591bef56b4d6 17209 putty_0.74-1+deb11u1~deb10u2_amd64.buildinfo
Checksums-Sha256:
9a5263cd5aed998e0ef42dd4f8c6fb8a7fc4b014558ca771c3de28f1709acd19 2395 putty_0.74-1+deb11u1~deb10u2.dsc
2c408bebcab72de5e33c83cd81ceb21fe4a20470b95c5b15883b6e8289c4531d 55784 putty_0.74-1+deb11u1~deb10u2.debian.tar.xz
47a861d0d981d03576675faead12c169cbc6491f5b01608c7c616151e9281bcf 17209 putty_0.74-1+deb11u1~deb10u2_amd64.buildinfo
Files:
b90a9f34bb0d985f765b6b84fcb07442 2395 net optional putty_0.74-1+deb11u1~deb10u2.dsc
a498b0118b552d6c793f335b8e86dd59 55784 net optional putty_0.74-1+deb11u1~deb10u2.debian.tar.xz
6eef7d889d95dc4df97417e163ab9f9d 17209 net optional putty_0.74-1+deb11u1~deb10u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=q+7u
-----END PGP SIGNATURE-----
Attachment:
pgpx3_65M7L75.pgp
Description: PGP signature