Logo
componentputty
Name
putty
Version
0.81
Type
library
Description
-
Licenses
MIT
PURL
-
CPE
cpe:2.3:a:putty:putty:0.81:-:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
0.84

Patches#


#
Title
Author
Resolve
1
unix/utils/arm_arch_queries.h: fix uclibc build
Fabrice Fontaine <fontaine.fabrice@gmail.com>
2
Don't call sfree after ssh_rsakex_freekey.
Simon Tatham <anakin@pobox.com>
CVE-2026-48850
3
Non-SSH backends: delay setting trust status to false.
Simon Tatham <anakin@pobox.com>
CVE-2026-48851
4
Remove bogus assertion in ecc_weierstrass_add.
Simon Tatham <anakin@pobox.com>
CVE-2026-48852

Vulnerabilities#


Name
Analysis
Description
Patched
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.
Patched
PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.
Patched
PuTTY 0.72 before 0.84 has a double free in RSA KEX.