The release of PuTTY 0.75 has been issued, a client for the SSH, Telnet, Rlogin, and SUPDUP protocols, supplied with a built-in terminal emulator and capable of running on Unix-like systems and Windows. The project's source code is available under the MIT license.
Key Changes:
- Pageant now allows loading an SSH-2 private key file with a password prompt occurring not at the loading stage but during the first use (keys remain encrypted in memory until used).
- SSH-2 key fingerprints are now displayed using the SHA-256 format with base64 encoding, as used in OpenSSH (support for the MD5-based format is retained as an option).
- The format of private key files has been updated; the new PPK3 format uses the Argon2 algorithm for hashing instead of SHA-1.
- Support for the Curve448 key exchange algorithm and new RSA options based on SHA-2 instead of SHA-1 has been added.
- PuTTYgen has added additional options for generating prime numbers for RSA and DSA keys, aligning with standard requirements.
- The terminal emulator now supports the escape sequence 'ESC [ 9 m' for displaying strikethrough text.
- In versions for Unix systems, networking has been enabled through Unix sockets.
- Support for an unencrypted protocol and the implementation of a simple server for it have been added, which can be used to tunnel connections within a single system in a way similar to unnamed pipes (e.g., for forwarding to containers).
- Support for the retro SUPDUP login protocol (RFC 734) has been added, which supplements Telnet and Rlogin.
- A vulnerability has been fixed that only appears on the Windows platform and can cause the windowing system to hang when connecting to server, sending an intensive stream of control sequences that change the window title contents.
Source: opennet.ru
