Subject: CVS commit: pkgsrc/security/putty
From: Ryo ONODERA
Date: 2023-02-14 04:28:07
Message id: 20230214032807.99874FA90@cvs.NetBSD.org

Log Message:
putty: Update to 0.78

Changelog:
 These features are new in 0.78 (released 2022-10-29):

    Support for OpenSSH certificates, for both user authentication keys and host \ 
keys.
    New SSH proxy modes, for running a custom shell command or subsystem on the \ 
proxy server instead of forwarding a port through it.
    New plugin system to allow a helper program to provide responses in \ 
keyboard-interactive authentication, intended to automate one-time password \ 
systems.
    Support for NTRU Prime post-quantum key exchange,
    Support for AES-GCM (in the OpenSSH style rather than RFC 5647).
    Support for more forms of Diffie-Hellman key exchange: new larger integer \ 
groups (such as group16 and group18), and support for using those and ECDH with \ 
GSSAPI.
    SSH configuration panels slightly reorganised. In particular, the \ 
configuration option 'Private key file for authentication' has moved to a new \ 
'Credentials' panel alongside controls for some of the above new features.
    Bug fix: the 32-bit Windows build now runs on Windows XP again.
    Bug fix: server-controlled window title setting now works again even if the \ 
character set is ISO 8859 (or a few other affected single-byte character sets).
    Bug fix: certain forms of OSC escape sequences (sent by some real servers) \ 
could cause PuTTY to crash.
    Bug fix: the -pwfile/-pw options no longer affect local key passphrase \ 
prompts, and no longer suppress Plink's anti-spoofing measures.
    Note: installing the 0.78 or later Windows installer will not automatically \ 
uninstall 0.77 or earlier, due to a change we've made to work around a bug. We \ 
recommend uninstalling the old version first, if possible. If both end up \ 
installed, uninstalling both and then re-installing the new version will fix \ 
things up.

These features were new in 0.77 (released 2022-05-27):

    Major improvements to network proxy support:
        Support for interactively prompting the user if the proxy server \ 
requires authentication.
        Built-in support for proxying via another SSH server, so that PuTTY will \ 
SSH to the proxy and then automatically forward a port through it to the \ 
destination host. (Similar to running plink -nc as a subprocess, but more \ 
convenient to set up, and allows you to answer interactive prompts presented by \ 
the proxy.)
        Support for HTTP Digest authentication, when talking to HTTP proxies.
    Introduced pterm.exe, a PuTTY-like wrapper program for Windows command \ 
prompts (or anything else running in a Windows console). Not yet included in the \ 
installer, but available as a .exe file from the Download page.
    Updated Unicode and bidi support to Unicode 14.0.0.
    New command-line option -pwfile, like -pw except that it reads the password \ 
from a file so that it doesn't show up on the command line.
    Windows Pageant: option --openssh-config to allow easy interoperation with \ 
Windows's ssh.exe.
    -pw (and -pwfile) now do not fall back to interactively prompting for a \ 
password if the provided password fails. (That was the original intention.)
    New configuration options for keyboard handling:
        Option to control handling of Shift + arrow keys
        Extra mode in the function-keys option, for modern xterm (v216 and above).
    Bug workaround flag to wait for the server's SSH greeting before sending our \ 
own, for servers (or proxies) that lose outgoing data before seeing any incoming \ 
data.
    Crypto update: added side-channel resistance in probabilistic RSA key generation.
    Crypto update: retired the use of short Diffie-Hellman exponents (just in case).
    Bug fix: reconfiguring remote port forwardings more than once no longer crashes.
    Bug fix: terminal output processing is now paused while handling a \ 
remote-controlled terminal resize, so that the subsequent screen redraw is \ 
interpreted relative to the new terminal size instead of the old.
    Bug fix: Windows PuTTYgen's mouse-based entropy collection now handles \ 
high-frequency mice without getting confused.
    Bug fix: Windows Pageant can now handle large numbers of concurrent \ 
connections without hanging or crashing.
    Bug fix: if Windows Pageant is started multiple times simultaneously, the \ 
instances should reliably agree on one of them to be the persistent server.
    Bug fix: remote-controlled changes of window title are now interpreted \ 
according to the configured character set.
    Bug fix: remote-controlled changes of window title no longer get confused by \ 
UTF-8 characters whose encoding includes the byte 0x9C (which terminates the \ 
control sequence in non-UTF-8 contexts).
    Bug fix: popping up the window context menu in the middle of a drag-select \ 
now no longer leaves the drag in a stuck state.
    Bug fix: extensive use of true colour in the terminal no longer slows down \ 
window redraws unnecessarily.
    Bug fix: when PSCP reports the server sending a disallowed compound \ 
pathname, it correctly reports the replacement name it's using for the \ 
downloaded file.
    Bug fix: enabling X11 forwarding in psusan failed to fall back through \ 
possible port numbers for the forwarded X display.
    For developers: migrated the build system to CMake, removing the old \ 
idiosyncratic mkfiles.pl and the autotools system.

Files:
RevisionActionfile
1.74modifypkgsrc/security/putty/Makefile
1.3modifypkgsrc/security/putty/PLIST
1.35modifypkgsrc/security/putty/distinfo
1.6modifypkgsrc/security/putty/patches/patch-terminal.c
1.4removepkgsrc/security/putty/patches/patch-unix_Makefile.gtk
1.2removepkgsrc/security/putty/patches/patch-unix_uxnet.c
1.3removepkgsrc/security/putty/patches/patch-unix_uxpgnt.c