adamel
released this
27 Mar 21:19
·
820 commits
to gssapi-keyex-0.70
since this release
Changes compared to upstream PuTTY 0.67:
- Support for GSS-API key exchange and gssapi-keyex authentication.
- Support for Heimdal GSS-API.
- 64-bit binaries and installer.
- Data Execution Prevention enabled for all binaries.
- Source compiles with MinGW32/64.
Changes previously unique to PuTTY GSS-API keyex but now part of upstream PuTTY 0.67:
- Binaries and installer signed using Microsoft Authenticode.
Changes compared to PuTTY 0.66 GSS-API keyex 1.0:
- Security fix: a buffer overrun in the old-style SCP protocol when receiving the header of each file downloaded from the server is fixed. See vuln-pscp-sink-sscanf.
- Windows PuTTY now sets its process ACL more restrictively, in an attempt to defend against malicious other processes reading sensitive data out of its memory.
- Assorted other robustness fixes for crashes and memory leaks.