putty (0.78-2+deb12u1) bookworm-security; urgency=medium

  * CVE-2023-48795: Cherry-pick from upstream:
    - Fix check for "ext-info-s".
    - Factor out the check for ext-info-* keyword.
    - Refactor confirm_weak to use SeatDialogText.
    - Support OpenSSH's new strict kex feature.
    - Add missing flags to AES selector vtables.
    - Warn about Terrapin vulnerability for unpatched servers.
    - Remove fatal-error reporting from scan_kexinits.
    - Terrapin warning: say if reconfiguration can help.

 -- Colin Watson <cjwatson@debian.org>  Mon, 18 Dec 2023 19:13:57 +0000

putty (0.78-2) unstable; urgency=medium

  [ Pino Toscano ]
  * Drop menu files, since pterm and putty already provide a .desktop file.
  * Stop shipping pterm.xpm and putty.xpm, as they were needed only by the
    menu files.
  * Ship all the available PNG icons to the XDG hicolor icon theme, so they
    can be loaded properly depending on the size, and even themed.
  * Stop shipping the PNG icons in the legacy pixmaps directory, as the hicolor
    icons will be enough now.
  * Build also the SVG icons, and ship them in the XDG hicolor icon theme.
  * Annotate python3 build dependency as :any, as it is needed only as a tool
    during the build.

 -- Colin Watson <cjwatson@debian.org>  Sun, 18 Dec 2022 14:57:23 +0000

putty (0.78-1) unstable; urgency=medium

  * New upstream release.
  * Update Lintian override to current syntax.
  * debian/watch: Upgrade to version 4.
  * debian/copyright: Convert to copyright-format 1.0.
  * Override Lintian source-is-missing misfire (see #1019980).

 -- Colin Watson <cjwatson@debian.org>  Sat, 29 Oct 2022 14:31:42 +0100

putty (0.77-1) unstable; urgency=medium

  * Use dh_installalternatives.
  * Simplify some debhelper overrides slightly.
  * Update upstream release signing keys (see
    https://www.chiark.greenend.org.uk/~sgtatham/putty/keys.html).
  * New upstream release.
  * Rework packaging somewhat to handle upstream's switch to CMake.

 -- Colin Watson <cjwatson@debian.org>  Tue, 31 May 2022 10:28:05 +0100

putty (0.76-2) unstable; urgency=medium

  * Upgrade to debhelper v13.
  * Build documentation from source using halibut (fixes bug where man page
    patches in 0.76-1 were ineffective).

 -- Colin Watson <cjwatson@debian.org>  Tue, 21 Dec 2021 00:48:30 +0000

putty (0.76-1) unstable; urgency=medium

  * New upstream release.
  * Cherry-pick from upstream:
    - psusan manpage: add a PATH to the UML example (closes: #991960).
    - Bug workaround to delay sending our SSH greeting (see #991958).

 -- Colin Watson <cjwatson@debian.org>  Mon, 16 Aug 2021 00:29:11 +0100

putty (0.75-3) unstable; urgency=medium

  * Cherry-pick from upstream:
    - CVE-2021-36367: New option to reject 'trivial' success of userauth
      (closes: #990901).

 -- Colin Watson <cjwatson@debian.org>  Sun, 11 Jul 2021 00:35:09 +0100

putty (0.75-2) unstable; urgency=medium

  * Add psusan to putty-tools.

 -- Colin Watson <cjwatson@debian.org>  Wed, 02 Jun 2021 15:03:48 +0100

putty (0.75-1) unstable; urgency=medium

  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Sun, 09 May 2021 11:24:32 +0100

putty (0.74-1) unstable; urgency=medium

  * New upstream release.
    - SECURITY: Key list from agent used after free if server rejects
      signature after PK_OK.
    - CVE-2020-14002: Dynamic host key policy leaks information about known
      host keys.

 -- Colin Watson <cjwatson@debian.org>  Sat, 27 Jun 2020 13:43:16 +0100

putty (0.73-3) unstable; urgency=medium

  * Cherry-pick from upstream:
    - pty_backend_create: set up SIGCHLD handler earlier (closes: #959396).

 -- Colin Watson <cjwatson@debian.org>  Fri, 08 May 2020 15:52:01 +0100

putty (0.73-2) unstable; urgency=medium

  * Cherry-pick from upstream:
    - gtkfont: use PANGO_PIXELS_CEIL to work out font metrics (fixes
      rendering regression at some font sizes with Pango 1.44).

 -- Colin Watson <cjwatson@debian.org>  Sun, 05 Apr 2020 12:22:42 +0100

putty (0.73-1) unstable; urgency=medium

  * New upstream release.

 -- Colin Watson <cjwatson@debian.org>  Sun, 29 Sep 2019 17:10:38 +0100

putty (0.72-2) unstable; urgency=medium

  * Use debhelper-compat instead of debian/compat.
  * Port mkicon.py to Python 3 and drop build-dependency on python (closes:
    #937380).

 -- Colin Watson <cjwatson@debian.org>  Sat, 31 Aug 2019 21:46:04 +0100

putty (0.72-1) unstable; urgency=medium

  * New upstream release.
  * Explicitly build-depend on python3, for test/cryptsuite.py.

 -- Colin Watson <cjwatson@debian.org>  Tue, 23 Jul 2019 10:49:47 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog pterm`.
