From patchwork Tue Jun 30 05:49:29 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bernd Kuhls X-Patchwork-Id: 1319545 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=busybox.net (client-ip=140.211.166.138; helo=whitealder.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=none (p=none dis=none) header.from=t-online.de Received: from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 49wtjN2Fwpz9s6w for ; Tue, 30 Jun 2020 15:49:42 +1000 (AEST) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id 347EA87CAE; Tue, 30 Jun 2020 05:49:40 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P7vzzF5wbJ-M; Tue, 30 Jun 2020 05:49:39 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by whitealder.osuosl.org (Postfix) with ESMTP id 4654487967; Tue, 30 Jun 2020 05:49:39 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137]) by ash.osuosl.org (Postfix) with ESMTP id 3AC531BF287 for ; Tue, 30 Jun 2020 05:49:36 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id 37986864AD for ; Tue, 30 Jun 2020 05:49:36 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id azjVw6TyCWSF for ; Tue, 30 Jun 2020 05:49:35 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mailout04.t-online.de (mailout04.t-online.de [194.25.134.18]) by fraxinus.osuosl.org (Postfix) with ESMTPS id DFBD786813 for ; Tue, 30 Jun 2020 05:49:34 +0000 (UTC) Received: from fwd30.aul.t-online.de (fwd30.aul.t-online.de [172.20.26.135]) by mailout04.t-online.de (Postfix) with SMTP id 5582741EB89A; Tue, 30 Jun 2020 07:49:32 +0200 (CEST) Received: from fli4l.lan.fli4l (Xjm6rQZ6ghvLDL30HxQnXPqTDAflZx4FfVZga7dA78U2SdHOeBXc9Ev0JFtEzulgWK@[79.214.205.138]) by fwd30.t-online.de with (TLSv1:ECDHE-RSA-AES256-SHA encrypted) esmtp id 1jq998-3e47rE0; Tue, 30 Jun 2020 07:49:30 +0200 Received: from mahler.lan.fli4l ([192.168.1.1]:54928) by fli4l.lan.fli4l with esmtp (Exim 4.92.3) (envelope-from ) id 1jq997-0004cC-ND; Tue, 30 Jun 2020 07:49:30 +0200 From: Bernd Kuhls To: buildroot@buildroot.org Date: Tue, 30 Jun 2020 07:49:29 +0200 Message-Id: <20200630054929.439626-1-bernd.kuhls@t-online.de> X-Mailer: git-send-email 2.26.2 MIME-Version: 1.0 X-ID: Xjm6rQZ6ghvLDL30HxQnXPqTDAflZx4FfVZga7dA78U2SdHOeBXc9Ev0JFtEzulgWK X-TOI-EXPURGATEID: 150726::1593496170-00014A27-FBD9B1AD/0/0 CLEAN NORMAL X-TOI-MSGID: 9518e2c8-4706-4e35-a8e9-ad74d4bb067d Subject: [Buildroot] [PATCH 1/1] package/putty: security bump version to 0.74 X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Alexander Dahl Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" Reformatted hashes, added md5 hash provided by upstream. Release notes: https://lists.tartarus.org/pipermail/putty-announce/2020/000030.html Fixes CVE-2020-14002: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14002 Updated license hash due to upstream commits adding copyright holders and bumping the copyright year: https://git.tartarus.org/?p=simon/putty.git;a=history;f=LICENCE;h=3e1d146289644749b3578f610c74715fa1c6bf0d;hb=HEAD Signed-off-by: Bernd Kuhls Reviewed-by: Alexander Dahl --- package/putty/putty.hash | 11 ++++++----- package/putty/putty.mk | 2 +- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/package/putty/putty.hash b/package/putty/putty.hash index 8600281efc..3885cef9b8 100644 --- a/package/putty/putty.hash +++ b/package/putty/putty.hash @@ -1,7 +1,8 @@ -# Hashes from: http://the.earth.li/~sgtatham/putty/0.73/{sha1,sha256,sha512}sums -sha1 17daebb82e476adfd578f6934c28f4d2c209b7d8 putty-0.73.tar.gz -sha256 3db0b5403fb41aecd3aa506611366650d927650b6eb3d839ad4dcc782519df1c putty-0.73.tar.gz -sha512 4ada4b8c6d68be44afede2676bc661fedfd1ea0b574b8232ad9aaa6f3a48baa9f4f0ded2955b3f2677a14db85a508f53c965cb00fcd7538a1ed9844031f0c5e5 putty-0.73.tar.gz +# Hashes from: http://the.earth.li/~sgtatham/putty/0.74/{md5,sha1,sha256,sha512}sums +md5 dbfa58f22a91b22b7489173e9dd09e30 putty-0.74.tar.gz +sha1 17b160e9720f67f9af9399d7d185b913b81f18fe putty-0.74.tar.gz +sha256 ddd5d388e51dd9e6e294005b30037f6ae802239a44c9dc9808c779e6d11b847d putty-0.74.tar.gz +sha512 0da86849ea764cd88643bd2c1984ac7211ae72dd7c41232307b1960a29ca9518044b022d87c60272d6db71a3357026862a112bedb90ee732b41494fca3acde9b putty-0.74.tar.gz # Locally calculated -sha256 b517b4a9504ba0f651d5e590245197b88d9a81d073905cc798cc9464c5ca7ba8 LICENCE +sha256 92028b6d56212bd3e4ce6a36bd2e2454851dca7e8ffe4c6ab51385ca214ca322 LICENCE diff --git a/package/putty/putty.mk b/package/putty/putty.mk index 5313a4f8be..8f9564bc38 100644 --- a/package/putty/putty.mk +++ b/package/putty/putty.mk @@ -4,7 +4,7 @@ # ################################################################################ -PUTTY_VERSION = 0.73 +PUTTY_VERSION = 0.74 PUTTY_SITE = http://the.earth.li/~sgtatham/putty/$(PUTTY_VERSION) PUTTY_LICENSE = MIT PUTTY_LICENSE_FILES = LICENCE