{"id":"openSUSE-SU-2026:20851-1","aliases":[],"status":"published","title":"Security update for putty","description":"This update for putty fixes the following issues:\n\nChanges in putty:\n\n- Update to release 0.84\n  * Fixed a remotely triggerable double-free in RSA key exchange.\n  * Fixed a remotely triggerable crash (assertion failure - program\n    termination) in NIST ECDSA signature verification.\n  * Fixed marking of Telnet and Rlogin session data with a trust\n    sigil after you authenticated to a proxy (possibly allowing a\n    server to spoof a repeat proxy password prompt).\n  * New ability to run a specified command before starting the\n    connection, e.g. to perform wake-on-LAN or a port knock.\n  * Display 'pre-edit text', showing the progress of using multiple\n    keystrokes to compose a single Unicode character.\n  * Improved support for to running the GUI tools on Wayland (fixed\n    startup issues and tuned performance).\n  * Configuring a SSH certificate authority used to fail unless you\n    manually made a config directory, now fixed.\n  * Fixed a spurious \"Network error: Socket is not connected\" when\n    authenticating to some HTTP proxies.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-05-31T10:28:37Z","modified":"2026-06-02T08:45:08Z","references":[{"url":"","tags":["advisory"]}],"sources":{"osv":[{"id":"openSUSE-SU-2026:20851-1","title":"Security update for putty","description":"This update for putty fixes the following issues:\n\nChanges in putty:\n\n- Update to release 0.84\n  * Fixed a remotely triggerable double-free in RSA key exchange.\n  * Fixed a remotely triggerable crash (assertion failure - program\n    termination) in NIST ECDSA signature verification.\n  * Fixed marking of Telnet and Rlogin session data with a trust\n    sigil after you authenticated to a proxy (possibly allowing a\n    server to spoof a repeat proxy password prompt).\n  * New ability to run a specified command before starting the\n    connection, e.g. to perform wake-on-LAN or a port knock.\n  * Display 'pre-edit text', showing the progress of using multiple\n    keystrokes to compose a single Unicode character.\n  * Improved support for to running the GUI tools on Wayland (fixed\n    startup issues and tuned performance).\n  * Configuring a SSH certificate authority used to fail unless you\n    manually made a config directory, now fixed.\n  * Fixed a spurious \"Network error: Socket is not connected\" when\n    authenticating to some HTTP proxies.\n","status":"published","published":"2026-05-31T10:28:37Z","modified":"2026-06-02T08:45:08.48046666Z","updated_at":"2026-11-02T16:58:41.463445Z"}]}}