openSUSE-SU-2019:2017-1
Recommended update for putty
No scoreFix available
This update for putty fixes the following issues:
Update to new upstream release 0.72 [boo#1144547, boo#1144548]
- Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking.
- Fixed a vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP and PSCP) if a malicious program can impersonate Pageant.
- Fixed a crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange.
This update was imported from the openSUSE:Leap:15.0:Update update project.
What each source reports
OSVNo score
Recommended update for putty
This update for putty fixes the following issues:
Update to new upstream release 0.72 [boo#1144547, boo#1144548]
- Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking.
- Fixed a vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP and PSCP) if a malicious program can impersonate Pageant.
- Fixed a crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange.
This update was imported from the openSUSE:Leap:15.0:Update update project.
- Record
openSUSE-SU-2019:2017-1- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
openSUSE-SU-2019:2017-1 is a vulnerability with no CVSS score yet in putty, published August 26, 2019. No source lists public exploit code. Fixed in putty 0.72-bp151.4.3.1.