openSUSE-SU-2019:1985-1
Recommended update for putty
No scoreFix available
This update for putty fixes the following issues:
Update to new upstream release 0.72 [boo#1144547, boo#1144548]
- Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking.
- Fixed a vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP and PSCP) if a malicious program can impersonate Pageant.
- Fixed a crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange.
What each source reports
OSVNo score
Recommended update for putty
This update for putty fixes the following issues:
Update to new upstream release 0.72 [boo#1144547, boo#1144548]
- Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking.
- Fixed a vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP and PSCP) if a malicious program can impersonate Pageant.
- Fixed a crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange.
- Record
openSUSE-SU-2019:1985-1- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
openSUSE-SU-2019:1985-1 is a vulnerability with no CVSS score yet in putty, published August 21, 2019. No source lists public exploit code. Fixed in putty 0.72-lp151.3.3.1.