CVS commit: pkgsrc/security/putty

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Apr 15 21:55:23 UTC 2024

Modified Files:
        pkgsrc/security/putty: Makefile distinfo

Log Message:
putty: update to 0.81.

PuTTY 0.81, released today, fixes a critical vulnerability
CVE-2024-31497 in the use of 521-bit ECDSA keys (ecdsa-sha2-nistp521).
If you have used a 521-bit ECDSA private key with any previous
version of PuTTY, consider the private key compromised: remove the
public key from authorized_keys files, and generate a new key pair.

However, this only affects that one algorithm and key size. No
other size of ECDSA key is affected, and no other key type is
affected.


To generate a diff of this commit:
cvs rdiff -u -r1.83 -r1.84 pkgsrc/security/putty/Makefile
cvs rdiff -u -r1.37 -r1.38 pkgsrc/security/putty/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/putty/Makefile
diff -u pkgsrc/security/putty/Makefile:1.83 pkgsrc/security/putty/Makefile:1.84
--- pkgsrc/security/putty/Makefile:1.83 Sun Apr  7 07:34:57 2024
+++ pkgsrc/security/putty/Makefile      Mon Apr 15 21:55:23 2024
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.83 2024/04/07 07:34:57 wiz Exp $
+# $NetBSD: Makefile,v 1.84 2024/04/15 21:55:23 wiz Exp $
 
-DISTNAME=      putty-0.80
-PKGREVISION=   2
+DISTNAME=      putty-0.81
 CATEGORIES=    security
 MASTER_SITES=  http://the.earth.li/~sgtatham/putty/${PKGVERSION_NOREV}/
 

Index: pkgsrc/security/putty/distinfo
diff -u pkgsrc/security/putty/distinfo:1.37 pkgsrc/security/putty/distinfo:1.38
--- pkgsrc/security/putty/distinfo:1.37 Mon Dec 18 15:57:00 2023
+++ pkgsrc/security/putty/distinfo      Mon Apr 15 21:55:23 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.37 2023/12/18 15:57:00 wiz Exp $
+$NetBSD: distinfo,v 1.38 2024/04/15 21:55:23 wiz Exp $
 
-BLAKE2s (putty-0.80.tar.gz) = c9e95c3ef9118d17c5c4c185db5a4c4b5d9e7dc5ff0d598e20feba674a8266ff
-SHA512 (putty-0.80.tar.gz) = c8a6b6fa54ecd8bcf4ec274fef51343dd9996e6458b250b5555c4dc88ded25e87f97277da482c29858510e65635112d541f559ab683635bd950572d850129f90
-Size (putty-0.80.tar.gz) = 2831433 bytes
+BLAKE2s (putty-0.81.tar.gz) = c6e77fbf456bb5f43d2d65689e8d51d664962e715daef3373d5286a6c2676a65
+SHA512 (putty-0.81.tar.gz) = d86f2fd0e126b18275d58cf64334b3b27c450899a1c2be2502de9faa2ef58f7fc8efc5d45f25c8395623f1e21917aa02407343bb2fee44c4c00b9f81267d5ecd
+Size (putty-0.81.tar.gz) = 2844616 bytes
 SHA1 (patch-ldisc.c) = cf31a65f920a3ea9b4a70602e4b2fd4d5df8d3e8
 SHA1 (patch-terminal.c) = 690d9021b14947ae24c68ecff6781ad255ab7a70
 SHA1 (patch-timing.c) = a6a492fc8b22c58e2973c854bffa4c8bf71eb6a7