Differences
This shows you the differences between the selected revisions of the page.
| 2026-08-25 | 2026-08-25 | ||
| grammar (martin) | PuTTY 0.85 (martin) | ||
| Line 147: | Line 147: | ||
| * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | * Bug fix: Failure when clicking tab close button while the session is already being closed. [[bug>2416]] | ||
| - | ===== [[6.5.7]] 6.5.7 (not released yet) ((2026-06-17)) ===== | + | ===== [[6.5.7]] 6.5.7 (not released yet) ((2026-08-25)) ===== |
| * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian. | * Translations completed: Croatian, Finnish, Georgian, Italian and Serbian. | ||
| * TLS/SSL core upgraded to OpenSSL 3.3.7. | * TLS/SSL core upgraded to OpenSSL 3.3.7. | ||
| + | * SSH private key tools (PuTTYgen and Pageant) upgraded to [[&url(puttychanges)|PuTTY 0.85]]. SSH core upgraded to include some fixes. \\ It brings the following change: | ||
| + | * Security issue: fixed a remotely triggerable use-after-free in Pageant. [[pbug>pageant-deferred-decryption-uaf]] | ||
| + | * Security issue: fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. [[pbug>etm-large-packet-overflow]] | ||
| + | * Security issue: fixed a buffer overflow in private key decryption, if the private key is constructed maliciously. [[pbug>argon2-parameter-checks]] | ||
| + | * Denial-of-service security fixes: a server can trigger a tight loop in WinSCP, and even a MITM can make it consume unlimited memory at startup. [[pbug>maxpkt-0-tight-loop]] | ||
| * Back-propagated fixes from 6.6.2 beta release: | * Back-propagated fixes from 6.6.2 beta release: | ||
| * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | * Bug fix: Failure setting ''Session.DebugLogPath'' when running in impersonated context. [[bug>2441]] | ||