[Bug 1821407] Re: Security vulnerabilities in Putty prior to 0.71

2019-05-21 Thread Launchpad Bug Tracker
This bug was fixed in the package putty - 0.67-3+deb9u1build0.16.04.1 --- putty (0.67-3+deb9u1build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian (LP: #1821407) putty (0.67-3+deb9u1) stretch-security; urgency=high * Backport security fixes from 0.71: - In

[Bug 1821407] Re: Security vulnerabilities in Putty prior to 0.71

2019-04-02 Thread Colin Watson
Though for clarity, we won't be backporting 0.71 wholesale, but rather applying cherry-picked security updates. I've been consulting with upstream on this. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bug

[Bug 1821407] Re: Security vulnerabilities in Putty prior to 0.71

2019-04-02 Thread Colin Watson
This is in progress - I've been working on getting backports in place in Debian, and Ubuntu should mostly be able to use the same patches. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1821407 Title:

[Bug 1821407] Re: Security vulnerabilities in Putty prior to 0.71

2019-03-22 Thread Seth Arnold
The launchpad cve integration was a nice idea but never really grew into anything. The Ubuntu security team tracks CVEs through a different database, eg: https://people.canonical.com/~ubuntu- security/cve/2019/CVE-2019-9898.html You can see the CVEs that we know about for Putty via: https://peo

[Bug 1821407] Re: Security vulnerabilities in Putty prior to 0.71

2019-03-22 Thread Hunter Buchanan
Tried to link CVEs to the bug report but the database hasn't been pulled recently enough. Will try again later today or tomorrow. ** Tags added: bionic ** Tags added: cosmic disco xenial -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu