Bug 49049 - CVE-2023-48795 для закрытия необходимо обновление до версии 0.80
Summary: CVE-2023-48795 для закрытия необходимо обновление до версии 0.80
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: putty (show other bugs)
Version: unstable
Hardware: x86_64 Linux
: P5 normal
Assignee: arbars@altlinux.org
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-01-11 16:03 MSK by FelixZ
Modified: 2024-04-19 05:57 MSK (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description FelixZ 2024-01-11 16:03:02 MSK 
Для закрытия CVE-2023-48795 необходимо обновить пакет putty до актуальной версии в апстриме 0.80
Comment 1 Michael Shigorin 2024-03-27 12:14:25 MSK 
Тём, глянь, пожалуйста.
Comment 2 Repository Robot 2024-04-19 05:57:30 MSK 
putty-0.81-alt1 -> sisyphus:

 Fri Apr 19 2024 Ilya Mashkin <oddity@altlinux.ru> 0.81-alt1
 - 0.81
 - Fixed a critical vulnerability in the use of 521-bit ECDSA keys (ecdsa-sha2-nistp521) (fixes: CVE-2024-31497)
 Sat Apr 13 2024 Ilya Mashkin <oddity@altlinux.ru> 0.80-alt2
 - Add more BR
 Sat Apr 13 2024 Ilya Mashkin <oddity@altlinux.ru> 0.80-alt1
 - 0.80 (Closes: #49049)
 - Fixed Terrapin vulnerability in some SSH protocol extensions (fixes: CVE-2023-48795)