kumquat-buildroot/package/putty/putty.hash

# Hashes from: http://the.earth.li/~sgtatham/putty/0.76/{md5,sha1,sha256,sha512}sums
md5  9d22f8c56c1eaa1c0af3098438f25908  putty-0.76.tar.gz
sha1  de09f50aee330eb05ad0cb81b970d0cc8e5c9b25  putty-0.76.tar.gz
sha256  547cd97a8daa87ef71037fab0773bceb54a8abccb2f825a49ef8eba5e045713f  putty-0.76.tar.gz
sha512  4576b359593928c6eba923f2d7b66ac0f2cf00e0c217cdbbb124471c3b35feb090e623847bfc507a4ef106cb3067aac47419e241b11dd8bf4ae554061fa93c25  putty-0.76.tar.gz

# Locally calculated
sha256  3f3e870dd3d0867d79370b1d433602c60bb91b59de04e5d8f2a149b788530d53  LICENCE
package/putty: bump version to 0.76 Patch 0002 fixing CVE-2021-36367 gone upstream, part of the 0.76 release. Link: https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html Link: https://lists.tartarus.org/pipermail/putty-announce/2021/000032.html Signed-off-by: Alexander Dahl <post@lespocky.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2021-10-17 14:35:01 +02:00			`# Hashes from: http://the.earth.li/~sgtatham/putty/0.76/{md5,sha1,sha256,sha512}sums`
			`md5 9d22f8c56c1eaa1c0af3098438f25908 putty-0.76.tar.gz`
			`sha1 de09f50aee330eb05ad0cb81b970d0cc8e5c9b25 putty-0.76.tar.gz`
			`sha256 547cd97a8daa87ef71037fab0773bceb54a8abccb2f825a49ef8eba5e045713f putty-0.76.tar.gz`
			`sha512 4576b359593928c6eba923f2d7b66ac0f2cf00e0c217cdbbb124471c3b35feb090e623847bfc507a4ef106cb3067aac47419e241b11dd8bf4ae554061fa93c25 putty-0.76.tar.gz`
putty: security bump to version 0.71 CVE-2019-9894: A remotely triggerable memory overwrite in RSA key exchange can occur before host key verification. CVE-2019-9895: A remotely triggerable buffer overflow exists in any kind of server-to-client forwarding. CVE-2019-9897: Multiple denial-of-service attacks that can be triggered by writing to the terminal. CVE-2019-9898: Potential recycling of random numbers used in cryptography. Disable static build for now. When building statically configure defines NO_GSSAPI. Build with NO_GSSAPI is currently broken. The issue has been reported upstream. Cc: Alexander Dahl <post@lespocky.de> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-03-24 20:21:13 +01:00
			`# Locally calculated`
package/putty: bump to version 0.75 Upstream does not set -Werror in its build files anymore. License file just changed copyright years and holders. PGP signatures of source tarball and hashes were checked. Link: https://www.chiark.greenend.org.uk/~sgtatham/putty/releases/0.75.html Link: https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html Signed-off-by: Alexander Dahl <post@lespocky.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2021-05-08 21:53:42 +02:00			`sha256 3f3e870dd3d0867d79370b1d433602c60bb91b59de04e5d8f2a149b788530d53 LICENCE`