Path to this page:
Subject: CVS commit: pkgsrc/security/putty
From: Ryo ONODERA
Date: 2023-02-14 04:28:07
Message id: 20230214032807.99874FA90@cvs.NetBSD.org
Log Message:
putty: Update to 0.78
Changelog:
These features are new in 0.78 (released 2022-10-29):
Support for OpenSSH certificates, for both user authentication keys and host \
keys.
New SSH proxy modes, for running a custom shell command or subsystem on the \
proxy server instead of forwarding a port through it.
New plugin system to allow a helper program to provide responses in \
keyboard-interactive authentication, intended to automate one-time password \
systems.
Support for NTRU Prime post-quantum key exchange,
Support for AES-GCM (in the OpenSSH style rather than RFC 5647).
Support for more forms of Diffie-Hellman key exchange: new larger integer \
groups (such as group16 and group18), and support for using those and ECDH with \
GSSAPI.
SSH configuration panels slightly reorganised. In particular, the \
configuration option 'Private key file for authentication' has moved to a new \
'Credentials' panel alongside controls for some of the above new features.
Bug fix: the 32-bit Windows build now runs on Windows XP again.
Bug fix: server-controlled window title setting now works again even if the \
character set is ISO 8859 (or a few other affected single-byte character sets).
Bug fix: certain forms of OSC escape sequences (sent by some real servers) \
could cause PuTTY to crash.
Bug fix: the -pwfile/-pw options no longer affect local key passphrase \
prompts, and no longer suppress Plink's anti-spoofing measures.
Note: installing the 0.78 or later Windows installer will not automatically \
uninstall 0.77 or earlier, due to a change we've made to work around a bug. We \
recommend uninstalling the old version first, if possible. If both end up \
installed, uninstalling both and then re-installing the new version will fix \
things up.
These features were new in 0.77 (released 2022-05-27):
Major improvements to network proxy support:
Support for interactively prompting the user if the proxy server \
requires authentication.
Built-in support for proxying via another SSH server, so that PuTTY will \
SSH to the proxy and then automatically forward a port through it to the \
destination host. (Similar to running plink -nc as a subprocess, but more \
convenient to set up, and allows you to answer interactive prompts presented by \
the proxy.)
Support for HTTP Digest authentication, when talking to HTTP proxies.
Introduced pterm.exe, a PuTTY-like wrapper program for Windows command \
prompts (or anything else running in a Windows console). Not yet included in the \
installer, but available as a .exe file from the Download page.
Updated Unicode and bidi support to Unicode 14.0.0.
New command-line option -pwfile, like -pw except that it reads the password \
from a file so that it doesn't show up on the command line.
Windows Pageant: option --openssh-config to allow easy interoperation with \
Windows's ssh.exe.
-pw (and -pwfile) now do not fall back to interactively prompting for a \
password if the provided password fails. (That was the original intention.)
New configuration options for keyboard handling:
Option to control handling of Shift + arrow keys
Extra mode in the function-keys option, for modern xterm (v216 and above).
Bug workaround flag to wait for the server's SSH greeting before sending our \
own, for servers (or proxies) that lose outgoing data before seeing any incoming \
data.
Crypto update: added side-channel resistance in probabilistic RSA key generation.
Crypto update: retired the use of short Diffie-Hellman exponents (just in case).
Bug fix: reconfiguring remote port forwardings more than once no longer crashes.
Bug fix: terminal output processing is now paused while handling a \
remote-controlled terminal resize, so that the subsequent screen redraw is \
interpreted relative to the new terminal size instead of the old.
Bug fix: Windows PuTTYgen's mouse-based entropy collection now handles \
high-frequency mice without getting confused.
Bug fix: Windows Pageant can now handle large numbers of concurrent \
connections without hanging or crashing.
Bug fix: if Windows Pageant is started multiple times simultaneously, the \
instances should reliably agree on one of them to be the persistent server.
Bug fix: remote-controlled changes of window title are now interpreted \
according to the configured character set.
Bug fix: remote-controlled changes of window title no longer get confused by \
UTF-8 characters whose encoding includes the byte 0x9C (which terminates the \
control sequence in non-UTF-8 contexts).
Bug fix: popping up the window context menu in the middle of a drag-select \
now no longer leaves the drag in a stuck state.
Bug fix: extensive use of true colour in the terminal no longer slows down \
window redraws unnecessarily.
Bug fix: when PSCP reports the server sending a disallowed compound \
pathname, it correctly reports the replacement name it's using for the \
downloaded file.
Bug fix: enabling X11 forwarding in psusan failed to fall back through \
possible port numbers for the forwarded X display.
For developers: migrated the build system to CMake, removing the old \
idiosyncratic mkfiles.pl and the autotools system.
Files: