Skip to content

PuTTY 0.67 GSS-API keyex 1.0

Latest
Compare
Choose a tag to compare
@adamel adamel released this 27 Mar 21:19
· 820 commits to gssapi-keyex-0.70 since this release

Changes compared to upstream PuTTY 0.67:

  • Support for GSS-API key exchange and gssapi-keyex authentication.
  • Support for Heimdal GSS-API.
  • 64-bit binaries and installer.
  • Data Execution Prevention enabled for all binaries.
  • Source compiles with MinGW32/64.

Changes previously unique to PuTTY GSS-API keyex but now part of upstream PuTTY 0.67:

  • Binaries and installer signed using Microsoft Authenticode.

Changes compared to PuTTY 0.66 GSS-API keyex 1.0:

  • Security fix: a buffer overrun in the old-style SCP protocol when receiving the header of each file downloaded from the server is fixed. See vuln-pscp-sink-sscanf.
  • Windows PuTTY now sets its process ACL more restrictively, in an attempt to defend against malicious other processes reading sensitive data out of its memory.
  • Assorted other robustness fixes for crashes and memory leaks.