Hello community,

here is the log from the commit of package putty for openSUSE:Factory checked 
in at 2019-08-13 13:27:05
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/putty (Old)
 and      /work/SRC/openSUSE:Factory/.putty.new.9556 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "putty"

Tue Aug 13 13:27:05 2019 rev:23 rq:722840 version:0.72

Changes:
--------
--- /work/SRC/openSUSE:Factory/putty/putty.changes      2019-04-30 
12:58:51.098146127 +0200
+++ /work/SRC/openSUSE:Factory/.putty.new.9556/putty.changes    2019-08-13 
13:27:08.877325488 +0200
@@ -1,0 +2,15 @@
+Mon Aug 12 15:24:18 UTC 2019 - Jan Engelhardt <[email protected]>
+
+- Update to new upstream release 0.72 [boo#1144547, boo#1144548]
+  * Fixed two separate vulnerabilities affecting the obsolete
+    SSH-1 protocol, both available before host key checking.
+  * Fixed a vulnerability in all the SSH client tools (PuTTY,
+    Plink, PSFTP and PSCP) if a malicious program can impersonate
+    Pageant.
+  * Fixed a crash in GSSAPI / Kerberos key exchange triggered if
+    the server provided an ordinary SSH host key as part of the
+    exchange.
+- Drop 0001-Revert-settings.c-allow-load_open_settings-NULL.patch
+  (merged)
+
+-------------------------------------------------------------------

Old:
----
  0001-Revert-settings.c-allow-load_open_settings-NULL.patch
  putty-0.71.tar.gz
  putty-0.71.tar.gz.gpg

New:
----
  putty-0.72.tar.gz
  putty-0.72.tar.gz.gpg

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ putty.spec ++++++
--- /var/tmp/diff_new_pack.xw6JP4/_old  2019-08-13 13:27:09.393325352 +0200
+++ /var/tmp/diff_new_pack.xw6JP4/_new  2019-08-13 13:27:09.393325352 +0200
@@ -17,7 +17,7 @@
 
 
 Name:           putty
-Version:        0.71
+Version:        0.72
 Release:        0
 Summary:        SSH client with optional GTK-based terminal emulator frontend
 License:        MIT
@@ -31,7 +31,6 @@
 Source4:        %name.keyring
 Patch1:         putty-03-config.diff
 Patch2:         reproducible.patch
-Patch3:         0001-Revert-settings.c-allow-load_open_settings-NULL.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  ImageMagick
 BuildRequires:  gtk3-devel

++++++ putty-0.71.tar.gz -> putty-0.72.tar.gz ++++++
++++ 22787 lines of diff (skipped)

++++++ putty-03-config.diff ++++++
--- /var/tmp/diff_new_pack.xw6JP4/_old  2019-08-13 13:27:09.765325255 +0200
+++ /var/tmp/diff_new_pack.xw6JP4/_new  2019-08-13 13:27:09.765325255 +0200
@@ -10,10 +10,10 @@
  windows/windefs.c |    2 +-
  3 files changed, 35 insertions(+), 22 deletions(-)
 
-Index: putty-0.71/settings.c
+Index: putty-0.72/settings.c
 ===================================================================
---- putty-0.71.orig/settings.c
-+++ putty-0.71/settings.c
+--- putty-0.72.orig/settings.c
++++ putty-0.72/settings.c
 @@ -17,8 +17,8 @@
  static const struct keyvalwhere ciphernames[] = {
      { "aes",        CIPHER_AES,             -1, -1 },
@@ -24,7 +24,7 @@
      { "des",        CIPHER_DES,             -1, -1 },
      { "blowfish",   CIPHER_BLOWFISH,        -1, -1 },
      { "arcfour",    CIPHER_ARCFOUR,         -1, -1 },
-@@ -843,7 +843,7 @@ void load_open_settings(settings_r *sess
+@@ -847,7 +847,7 @@ void load_open_settings(settings_r *sess
      }
      gppb(sesskey, "TCPNoDelay", true, conf, CONF_tcp_nodelay);
      gppb(sesskey, "TCPKeepalives", false, conf, CONF_tcp_keepalives);
@@ -33,7 +33,7 @@
      gpps(sesskey, "TerminalSpeed", "38400,38400", conf, CONF_termspeed);
      if (gppmap(sesskey, "TerminalModes", conf, CONF_ttymodes)) {
        /*
-@@ -1021,10 +1021,10 @@ void load_open_settings(settings_r *sess
+@@ -1029,10 +1029,10 @@ void load_open_settings(settings_r *sess
      gppb(sesskey, "PassiveTelnet", false, conf, CONF_passive_telnet);
      gppb(sesskey, "BackspaceIsDelete", true, conf, CONF_bksp_is_delete);
      gppb(sesskey, "RXVTHomeEnd", false, conf, CONF_rxvt_homeend);
@@ -46,7 +46,7 @@
      gppb(sesskey, "NoRemoteResize", false, conf, CONF_no_remote_resize);
      gppb(sesskey, "NoAltScreen", false, conf, CONF_no_alt_screen);
      gppb(sesskey, "NoRemoteWinTitle", false, conf, CONF_no_remote_wintitle);
-@@ -1046,9 +1046,9 @@ void load_open_settings(settings_r *sess
+@@ -1054,9 +1054,9 @@ void load_open_settings(settings_r *sess
      gppb(sesskey, "ApplicationKeypad", false, conf, CONF_app_keypad);
      gppb(sesskey, "NetHackKeypad", false, conf, CONF_nethack_keypad);
      gppb(sesskey, "AltF4", true, conf, CONF_alt_f4);
@@ -58,7 +58,7 @@
      gppb(sesskey, "CtrlAltKeys", true, conf, CONF_ctrlaltkeys);
  #ifdef OSX_META_KEY_CONFIG
      gppb(sesskey, "OSXOptionMeta", true, conf, CONF_osx_option_meta);
-@@ -1060,12 +1060,12 @@ void load_open_settings(settings_r *sess
+@@ -1068,12 +1068,12 @@ void load_open_settings(settings_r *sess
      gppi(sesskey, "LocalEdit", AUTO, conf, CONF_localedit);
      gpps(sesskey, "Answerback", "PuTTY", conf, CONF_answerback);
      gppb(sesskey, "AlwaysOnTop", false, conf, CONF_alwaysontop);
@@ -73,10 +73,10 @@
      gppb(sesskey, "BlinkCur", false, conf, CONF_blink_cur);
      /* pedantic compiler tells me I can't use conf, CONF_beep as an int * :-) 
*/
      gppi(sesskey, "Beep", 1, conf, CONF_beep);
-@@ -1100,10 +1100,10 @@ void load_open_settings(settings_r *sess
+@@ -1108,10 +1108,10 @@ void load_open_settings(settings_r *sess
      gppb(sesskey, "CRImpliesLF", false, conf, CONF_crhaslf);
-     gppb(sesskey, "DisableArabicShaping", false, conf, CONF_arabicshaping);
-     gppb(sesskey, "DisableBidi", false, conf, CONF_bidi);
+     gppb(sesskey, "DisableArabicShaping", false, conf, CONF_no_arabicshaping);
+     gppb(sesskey, "DisableBidi", false, conf, CONF_no_bidi);
 -    gppb(sesskey, "WinNameAlways", true, conf, CONF_win_name_always);
 +    gppb(sesskey, "WinNameAlways", false, conf, CONF_win_name_always);
      gpps(sesskey, "WinTitle", "", conf, CONF_wintitle);
@@ -86,7 +86,7 @@
      gppfont(sesskey, "Font", conf, CONF_font);
      gppi(sesskey, "FontQuality", FQ_DEFAULT, conf, CONF_font_quality);
      gppi(sesskey, "FontVTMode", VT_UNICODE, conf, CONF_vtmode);
-@@ -1116,11 +1116,28 @@ void load_open_settings(settings_r *sess
+@@ -1124,11 +1124,28 @@ void load_open_settings(settings_r *sess
  
      for (i = 0; i < 22; i++) {
        static const char *const defaults[] = {
@@ -120,7 +120,7 @@
        };
        char buf[20], *buf2;
        int c0, c1, c2;
-@@ -1178,7 +1195,7 @@ void load_open_settings(settings_r *sess
+@@ -1186,7 +1203,7 @@ void load_open_settings(settings_r *sess
       * The empty default for LineCodePage will be converted later
       * into a plausible default for the locale.
       */
@@ -129,11 +129,11 @@
      gppb(sesskey, "CJKAmbigWide", false, conf, CONF_cjk_ambig_wide);
      gppb(sesskey, "UTF8Override", true, conf, CONF_utf8_override);
      gpps(sesskey, "Printer", "", conf, CONF_printer);
-Index: putty-0.71/unix/unix.h
+Index: putty-0.72/unix/unix.h
 ===================================================================
---- putty-0.71.orig/unix/unix.h
-+++ putty-0.71/unix/unix.h
-@@ -399,11 +399,7 @@ Socket *make_fd_socket(int infd, int out
+--- putty-0.72.orig/unix/unix.h
++++ putty-0.72/unix/unix.h
+@@ -400,11 +400,7 @@ Socket *make_fd_socket(int infd, int out
  /*
   * Default font setting, which can vary depending on NOT_X_WINDOWS.
   */
@@ -146,10 +146,10 @@
  
  /*
   * uxpty.c.
-Index: putty-0.71/windows/windefs.c
+Index: putty-0.72/windows/windefs.c
 ===================================================================
---- putty-0.71.orig/windows/windefs.c
-+++ putty-0.71/windows/windefs.c
+--- putty-0.72.orig/windows/windefs.c
++++ putty-0.72/windows/windefs.c
 @@ -9,7 +9,7 @@
  FontSpec *platform_default_fontspec(const char *name)
  {


Reply via email to