openSUSE-SU-2026:20851-1
Security update for putty
No score
openSUSE-SU-2026:20851-1 is a vulnerability with no CVSS score yet, published May 31, 2026. No source lists public exploit code. No source names a fixed version.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
This update for putty fixes the following issues:
Changes in putty:
- Update to release 0.84
- Fixed a remotely triggerable double-free in RSA key exchange.
- Fixed a remotely triggerable crash (assertion failure - program termination) in NIST ECDSA signature verification.
- Fixed marking of Telnet and Rlogin session data with a trust sigil after you authenticated to a proxy (possibly allowing a server to spoof a repeat proxy password prompt).
- New ability to run a specified command before starting the connection, e.g. to perform wake-on-LAN or a port knock.
- Display 'pre-edit text', showing the progress of using multiple keystrokes to compose a single Unicode character.
- Improved support for to running the GUI tools on Wayland (fixed startup issues and tuned performance).
- Configuring a SSH certificate authority used to fail unless you manually made a config directory, now fixed.
- Fixed a spurious "Network error: Socket is not connected" when authenticating to some HTTP proxies.
What each source reports
OSVNo score
Security update for putty
This update for putty fixes the following issues:
Changes in putty:
- Update to release 0.84
- Fixed a remotely triggerable double-free in RSA key exchange.
- Fixed a remotely triggerable crash (assertion failure - program termination) in NIST ECDSA signature verification.
- Fixed marking of Telnet and Rlogin session data with a trust sigil after you authenticated to a proxy (possibly allowing a server to spoof a repeat proxy password prompt).
- New ability to run a specified command before starting the connection, e.g. to perform wake-on-LAN or a port knock.
- Display 'pre-edit text', showing the progress of using multiple keystrokes to compose a single Unicode character.
- Improved support for to running the GUI tools on Wayland (fixed startup issues and tuned performance).
- Configuring a SSH certificate authority used to fail unless you manually made a config directory, now fixed.
- Fixed a spurious "Network error: Socket is not connected" when authenticating to some HTTP proxies.
- Record
openSUSE-SU-2026:20851-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.