-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Jul 2024 10:13:59 +0000 Source: putty Binary: putty-doc Architecture: all Version: 0.74-1+deb11u2 Distribution: bullseye Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Bastien Roucariès Description: putty-doc - PuTTY HTML documentation Changes: putty (0.74-1+deb11u2) bullseye; urgency=medium . * Non-maintainer upload. * Cherry-pick from upstream: - Refactor the ssh_hash vtable. - Add an extra HMAC constructor function. - Fix CVE-2024-31497: biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words, an adversary may already have enough signature information to compromise a victim's private key, even if there is no further use of vulnerable PuTTY versions. Checksums-Sha1: 3c52bb281b8ec727a82774476fc7bca6d88a183f 155616 putty-doc_0.74-1+deb11u2_all.deb 978a8c28432d26cd7f050343a1e305dbcd940430 14700 putty_0.74-1+deb11u2_all-buildd.buildinfo Checksums-Sha256: 72b023768a42b536e8e9c6e8696c6b1331f5d5b6e71073933de1eaaae11a3591 155616 putty-doc_0.74-1+deb11u2_all.deb 2f6f49390f8cebbef89fea657c34fe143dffd99d3eb40a46df171781e0d358b6 14700 putty_0.74-1+deb11u2_all-buildd.buildinfo Files: 36bb5009d6d21d69e8ebd2325633aac1 155616 doc optional putty-doc_0.74-1+deb11u2_all.deb 0590cb0af337883519d10cfb6a072b2a 14700 net optional putty_0.74-1+deb11u2_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEQsM0t1ygJv2xcx3e4cagXJhOTXsFAma4ptUACgkQ4cagXJhO TXslHBAAwL3pxHWyEJZk8IF6zDQlfdY1lTiJnsEcUV4hrFpYO3q3F8Sp3uhEmh3A 1kx8cXaIJvdwI+UIzWFcAX91cgqBf7iKHvL2FIWFaPNFdoJyD+MvBFWZrTdwbQwl TlxzSomfJimepmdiAq+joEWpIpaxC0MRbnRd2rThAt6wW9SLUl7QkiSFnZPfFcyH P5yLVnhah+nrN3aKPlOTvFPLME4xi903WI3QXgDSFvbB7A1UsxUB2wFCnXqJkrJ8 vThBH9GKXnjbX+AFoAYjCgTnFkPbo7a+ijurMtrbXgYpM9YRzZyumgBDt9pQTVcR jvv7tI7BjH+EjaVUgnpXvkTvIaVzMwgbVjJwY8AQMCymBf6u1q7CwJbQZjoQ8YFo UWHPOqnio22fxaD2WBrMypbiZDiwXCM81u/BVGSEwENim69YOZIdGXyAmPpgozc1 gUzxgQo39oMqwe8LtfnM5LIUjs1VOHgFx/3G1t5BD1I8ybYX/CACVo06KUBymTmx sj7XNUYcCIsei/AIxkcdq+XOsjtNEug56PuG05gH/OB5Jo0vmOZjG/h75ScNES4H S4t7QnvNWHdqfrDnRlZrOcs0tZ9eiAUme6ebe/nfKdGpE57kmOQCJfcZItSE7/zM ZV4VPHiqOfuo1kIRRaUV3yrWHDTqK1Sq9w55G+Ht2LvwKm5eY+4= =n7Hx -----END PGP SIGNATURE-----