{"affected":[{"ecosystem_specific":{"binaries":[{"putty":"0.80-bp154.2.3.1"}]},"package":{"ecosystem":"SUSE:Package Hub 15 SP4","name":"putty","purl":"purl:rpm/suse/putty&distro=SUSE%20Package%20Hub%2015%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.80-bp154.2.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"putty":"0.80-bp154.2.3.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.4","name":"putty","purl":"purl:rpm/suse/putty&distro=openSUSE%20Leap%2015.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.80-bp154.2.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update for putty fixes the following issues:\n\nputty was updated to to release 0.80:\n\n  * Fix CVE-2023-48795 [boo#1218128]\n\n- Update to release 0.79\n\n  * Terminal mouse tracking: support for mouse movements which are\n    not drags, and support for horizontal scroll events (e.g.\n    generated by trackpads).\n  * Fixed: PuTTY could fail an assertion if a resize control\n    sequence was sent by the server while the window was docked to\n    one half of the screen in KDE.\n  * Fixed: PuTTY could fail an assertion if you tried to change the\n    font size while the window was maximised.\n\n- Update to release 0.78\n\n  * Support for OpenSSH certificates, for both user\n    authentication keys and host keys.\n  * New SSH proxy modes, for running a custom shell command or\n    subsystem on the proxy server instead of forwarding a port\n    through it.\n  * New plugin system to allow a helper program to provide\n    responses in keyboard-interactive authentication, intended to\n    automate one-time password systems.\n  * Support for NTRU Prime post-quantum key exchange,\n  * Support for AES-GCM (in the OpenSSH style rather than\n    RFC 5647).\n  * Support for more forms of Diffie-Hellman key exchange: new\n    larger integer groups (such as group16 and group18), and\n    support for using those and ECDH with GSSAPI.\n  * Bug fix: server-controlled window title setting now works\n    again even if the character set is ISO 8859 (or a few other","id":"openSUSE-SU-2024:0005-1","modified":"2024-01-03T11:04:00Z","published":"2024-01-03T11:04:00Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BVOEVD2B4CFVDJEJANZW6QGRI6FTWFJ3/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218128"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-48795"}],"related":["CVE-2023-48795"],"summary":"Security update for putty"}