Files
buildroot/package/putty
Thomas Perale 789c759258 package/putty: patch CVE-2026-4885{0, 1, 2}
- CVE-2026-48850:
    PuTTY 0.72 before 0.84 has a double free in RSA KEX.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2026-48850

- CVE-2026-48851:
    PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust
    indication for TELNET data but the trust status is not cleared between
    proxy authentication and the main session.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2026-48851

- CVE-2026-48852:
    PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature
    verification.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2026-48852

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-05-28 11:49:35 +02:00
..
…
…