mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 00:04:06 -09:00
789c759258
- CVE-2026-48850:
PuTTY 0.72 before 0.84 has a double free in RSA KEX.
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-48850
- CVE-2026-48851:
PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust
indication for TELNET data but the trust status is not cleared between
proxy authentication and the main session.
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-48851
- CVE-2026-48852:
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature
verification.
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-48852
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
33 lines
866 B
Makefile
33 lines
866 B
Makefile
################################################################################
|
|
#
|
|
# putty
|
|
#
|
|
################################################################################
|
|
|
|
PUTTY_VERSION = 0.81
|
|
PUTTY_SITE = http://the.earth.li/~sgtatham/putty/$(PUTTY_VERSION)
|
|
PUTTY_LICENSE = MIT
|
|
PUTTY_LICENSE_FILES = LICENCE
|
|
PUTTY_CPE_ID_VENDOR = putty
|
|
PUTTY_DEPENDENCIES = host-pkgconf
|
|
PUTTY_CONF_OPTS = -DPUTTY_GSSAPI=OFF
|
|
|
|
# 0002-CVE-2026-48850.patch
|
|
PUTTY_IGNORE_CVES += CVE-2026-48850
|
|
# 0003-CVE-2026-48851.patch
|
|
PUTTY_IGNORE_CVES += CVE-2026-48851
|
|
# 0004-CVE-2026-48852.patch
|
|
PUTTY_IGNORE_CVES += CVE-2026-48852
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBGTK3),y)
|
|
PUTTY_DEPENDENCIES += libgtk3
|
|
else ifeq ($(BR2_PACKAGE_LIBGTK2),y)
|
|
PUTTY_DEPENDENCIES += libgtk2
|
|
endif
|
|
|
|
ifeq ($(BR2_STATIC_LIBS),y)
|
|
PUTTY_CONF_OPTS += -DCMAKE_C_FLAGS="$(TARGET_CFLAGS) -DNO_LIBDL"
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|