* [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74
@ 2020-06-30 5:49 Bernd Kuhls
2020-06-30 7:04 ` Alexander Dahl
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Bernd Kuhls @ 2020-06-30 5:49 UTC (permalink / raw)
To: buildroot
Reformatted hashes, added md5 hash provided by upstream.
Release notes:
https://lists.tartarus.org/pipermail/putty-announce/2020/000030.html
Fixes CVE-2020-14002:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14002
Updated license hash due to upstream commits adding copyright holders
and bumping the copyright year:
https://git.tartarus.org/?p=simon/putty.git;a=history;f=LICENCE;h=3e1d146289644749b3578f610c74715fa1c6bf0d;hb=HEAD
Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
---
package/putty/putty.hash | 11 ++++++-----
package/putty/putty.mk | 2 +-
2 files changed, 7 insertions(+), 6 deletions(-)
diff --git a/package/putty/putty.hash b/package/putty/putty.hash
index 8600281efc..3885cef9b8 100644
--- a/package/putty/putty.hash
+++ b/package/putty/putty.hash
@@ -1,7 +1,8 @@
-# Hashes from: http://the.earth.li/~sgtatham/putty/0.73/{sha1,sha256,sha512}sums
-sha1 17daebb82e476adfd578f6934c28f4d2c209b7d8 putty-0.73.tar.gz
-sha256 3db0b5403fb41aecd3aa506611366650d927650b6eb3d839ad4dcc782519df1c putty-0.73.tar.gz
-sha512 4ada4b8c6d68be44afede2676bc661fedfd1ea0b574b8232ad9aaa6f3a48baa9f4f0ded2955b3f2677a14db85a508f53c965cb00fcd7538a1ed9844031f0c5e5 putty-0.73.tar.gz
+# Hashes from: http://the.earth.li/~sgtatham/putty/0.74/{md5,sha1,sha256,sha512}sums
+md5 dbfa58f22a91b22b7489173e9dd09e30 putty-0.74.tar.gz
+sha1 17b160e9720f67f9af9399d7d185b913b81f18fe putty-0.74.tar.gz
+sha256 ddd5d388e51dd9e6e294005b30037f6ae802239a44c9dc9808c779e6d11b847d putty-0.74.tar.gz
+sha512 0da86849ea764cd88643bd2c1984ac7211ae72dd7c41232307b1960a29ca9518044b022d87c60272d6db71a3357026862a112bedb90ee732b41494fca3acde9b putty-0.74.tar.gz
# Locally calculated
-sha256 b517b4a9504ba0f651d5e590245197b88d9a81d073905cc798cc9464c5ca7ba8 LICENCE
+sha256 92028b6d56212bd3e4ce6a36bd2e2454851dca7e8ffe4c6ab51385ca214ca322 LICENCE
diff --git a/package/putty/putty.mk b/package/putty/putty.mk
index 5313a4f8be..8f9564bc38 100644
--- a/package/putty/putty.mk
+++ b/package/putty/putty.mk
@@ -4,7 +4,7 @@
#
################################################################################
-PUTTY_VERSION = 0.73
+PUTTY_VERSION = 0.74
PUTTY_SITE = http://the.earth.li/~sgtatham/putty/$(PUTTY_VERSION)
PUTTY_LICENSE = MIT
PUTTY_LICENSE_FILES = LICENCE
--
2.26.2
^ permalink raw reply related [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74
2020-06-30 5:49 [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74 Bernd Kuhls
@ 2020-06-30 7:04 ` Alexander Dahl
2020-07-14 13:09 ` Thomas Petazzoni
2020-07-21 21:13 ` Peter Korsgaard
2 siblings, 0 replies; 4+ messages in thread
From: Alexander Dahl @ 2020-06-30 7:04 UTC (permalink / raw)
To: buildroot
Hello Bernd,
On Tue, Jun 30, 2020 at 07:49:29AM +0200, Bernd Kuhls wrote:
> Reformatted hashes, added md5 hash provided by upstream.
>
> Release notes:
> https://lists.tartarus.org/pipermail/putty-announce/2020/000030.html
>
> Fixes CVE-2020-14002:
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14002
>
> Updated license hash due to upstream commits adding copyright holders
> and bumping the copyright year:
> https://git.tartarus.org/?p=simon/putty.git;a=history;f=LICENCE;h=3e1d146289644749b3578f610c74715fa1c6bf0d;hb=HEAD
>
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Reviewed-by: Alexander Dahl <post@lespocky.de>
Thanks
Alex
> ---
> package/putty/putty.hash | 11 ++++++-----
> package/putty/putty.mk | 2 +-
> 2 files changed, 7 insertions(+), 6 deletions(-)
>
> diff --git a/package/putty/putty.hash b/package/putty/putty.hash
> index 8600281efc..3885cef9b8 100644
> --- a/package/putty/putty.hash
> +++ b/package/putty/putty.hash
> @@ -1,7 +1,8 @@
> -# Hashes from: http://the.earth.li/~sgtatham/putty/0.73/{sha1,sha256,sha512}sums
> -sha1 17daebb82e476adfd578f6934c28f4d2c209b7d8 putty-0.73.tar.gz
> -sha256 3db0b5403fb41aecd3aa506611366650d927650b6eb3d839ad4dcc782519df1c putty-0.73.tar.gz
> -sha512 4ada4b8c6d68be44afede2676bc661fedfd1ea0b574b8232ad9aaa6f3a48baa9f4f0ded2955b3f2677a14db85a508f53c965cb00fcd7538a1ed9844031f0c5e5 putty-0.73.tar.gz
> +# Hashes from: http://the.earth.li/~sgtatham/putty/0.74/{md5,sha1,sha256,sha512}sums
> +md5 dbfa58f22a91b22b7489173e9dd09e30 putty-0.74.tar.gz
> +sha1 17b160e9720f67f9af9399d7d185b913b81f18fe putty-0.74.tar.gz
> +sha256 ddd5d388e51dd9e6e294005b30037f6ae802239a44c9dc9808c779e6d11b847d putty-0.74.tar.gz
> +sha512 0da86849ea764cd88643bd2c1984ac7211ae72dd7c41232307b1960a29ca9518044b022d87c60272d6db71a3357026862a112bedb90ee732b41494fca3acde9b putty-0.74.tar.gz
>
> # Locally calculated
> -sha256 b517b4a9504ba0f651d5e590245197b88d9a81d073905cc798cc9464c5ca7ba8 LICENCE
> +sha256 92028b6d56212bd3e4ce6a36bd2e2454851dca7e8ffe4c6ab51385ca214ca322 LICENCE
> diff --git a/package/putty/putty.mk b/package/putty/putty.mk
> index 5313a4f8be..8f9564bc38 100644
> --- a/package/putty/putty.mk
> +++ b/package/putty/putty.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -PUTTY_VERSION = 0.73
> +PUTTY_VERSION = 0.74
> PUTTY_SITE = http://the.earth.li/~sgtatham/putty/$(PUTTY_VERSION)
> PUTTY_LICENSE = MIT
> PUTTY_LICENSE_FILES = LICENCE
> --
> 2.26.2
--
/"\ ASCII RIBBON | ?With the first link, the chain is forged. The first
\ / CAMPAIGN | speech censured, the first thought forbidden, the
X AGAINST | first freedom denied, chains us all irrevocably.?
/ \ HTML MAIL | (Jean-Luc Picard, quoting Judge Aaron Satie)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20200630/d49b4866/attachment.asc>
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74
2020-06-30 5:49 [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74 Bernd Kuhls
2020-06-30 7:04 ` Alexander Dahl
@ 2020-07-14 13:09 ` Thomas Petazzoni
2020-07-21 21:13 ` Peter Korsgaard
2 siblings, 0 replies; 4+ messages in thread
From: Thomas Petazzoni @ 2020-07-14 13:09 UTC (permalink / raw)
To: buildroot
On Tue, 30 Jun 2020 07:49:29 +0200
Bernd Kuhls <bernd.kuhls@t-online.de> wrote:
> Reformatted hashes, added md5 hash provided by upstream.
>
> Release notes:
> https://lists.tartarus.org/pipermail/putty-announce/2020/000030.html
>
> Fixes CVE-2020-14002:
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14002
>
> Updated license hash due to upstream commits adding copyright holders
> and bumping the copyright year:
> https://git.tartarus.org/?p=simon/putty.git;a=history;f=LICENCE;h=3e1d146289644749b3578f610c74715fa1c6bf0d;hb=HEAD
>
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
> ---
> package/putty/putty.hash | 11 ++++++-----
> package/putty/putty.mk | 2 +-
> 2 files changed, 7 insertions(+), 6 deletions(-)
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74
2020-06-30 5:49 [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74 Bernd Kuhls
2020-06-30 7:04 ` Alexander Dahl
2020-07-14 13:09 ` Thomas Petazzoni
@ 2020-07-21 21:13 ` Peter Korsgaard
2 siblings, 0 replies; 4+ messages in thread
From: Peter Korsgaard @ 2020-07-21 21:13 UTC (permalink / raw)
To: buildroot
>>>>> "Bernd" == Bernd Kuhls <bernd.kuhls@t-online.de> writes:
> Reformatted hashes, added md5 hash provided by upstream.
> Release notes:
> https://lists.tartarus.org/pipermail/putty-announce/2020/000030.html
> Fixes CVE-2020-14002:
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14002
> Updated license hash due to upstream commits adding copyright holders
> and bumping the copyright year:
> https://git.tartarus.org/?p=simon/putty.git;a=history;f=LICENCE;h=3e1d146289644749b3578f610c74715fa1c6bf0d;hb=HEAD
> Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Committed to 2020.02.x and 2020.05.x, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2020-07-21 21:13 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-06-30 5:49 [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74 Bernd Kuhls
2020-06-30 7:04 ` Alexander Dahl
2020-07-14 13:09 ` Thomas Petazzoni
2020-07-21 21:13 ` Peter Korsgaard
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.