From tartarus-commits at lists.tartarus.org Mon Jun 1 17:55:07 2026 From: tartarus-commits at lists.tartarus.org (Commits to Tartarus hosted VCS) Date: Mon, 01 Jun 2026 17:55:07 +0100 Subject: simon-git: putty-wishlist (main): Jacob Nevins Message-ID: TL;DR: f7e9523 Add CVEs for 3 vulnerabilities in 0.84. 0074a51 telnet-trust-sigil: reference vuln-auth-prompt-spoofing. b5fea80 rsakex-double-free: Fix typo 'kex exchange'. Repository: https://git.tartarus.org/simon/putty-wishlist.git On the web: https://git.tartarus.org/?p=simon/putty-wishlist.git Branch updated: main Committer: Jacob Nevins Date: 2026-06-01 17:55:07 commit f7e9523b2b3e26e99235d2bf52ed15acb5e21ec5 web diff https://git.tartarus.org/?p=simon/putty-wishlist.git;a=commitdiff;h=f7e9523b2b3e26e99235d2bf52ed15acb5e21ec5;hp=4a3d1a45f620a30c5613946f8963ada797985e78 Author: Jacob Nevins Date: Mon Jun 1 17:50:48 2026 +0100 Add CVEs for 3 vulnerabilities in 0.84. (Found via .) data/ecdsa-remotely-triggerable-assertion | 5 +++-- data/rsakex-double-free | 3 ++- data/telnet-trust-sigil | 2 +- 3 files changed, 6 insertions(+), 4 deletions(-) commit 0074a518310aa88089cba9b436e7e985abf755f0 web diff https://git.tartarus.org/?p=simon/putty-wishlist.git;a=commitdiff;h=0074a518310aa88089cba9b436e7e985abf755f0;hp=f7e9523b2b3e26e99235d2bf52ed15acb5e21ec5 Author: Jacob Nevins Date: Mon Jun 1 17:53:35 2026 +0100 telnet-trust-sigil: reference vuln-auth-prompt-spoofing. data/telnet-trust-sigil | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) commit b5fea80c4ac72d81fad9349c0506ae5e7b649673 web diff https://git.tartarus.org/?p=simon/putty-wishlist.git;a=commitdiff;h=b5fea80c4ac72d81fad9349c0506ae5e7b649673;hp=0074a518310aa88089cba9b436e7e985abf755f0 Author: Jacob Nevins Date: Mon Jun 1 17:54:15 2026 +0100 rsakex-double-free: Fix typo 'kex exchange'. data/rsakex-double-free | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) From tartarus-commits at lists.tartarus.org Wed Jun 17 08:16:47 2026 From: tartarus-commits at lists.tartarus.org (Commits to Tartarus hosted VCS) Date: Wed, 17 Jun 2026 08:16:47 +0100 Subject: simon-git: tilings-rs (main): Simon Tatham Message-ID: TL;DR: e3f5ecb Update to itertools 0.15.0. Repository: https://git.tartarus.org/simon/tilings-rs.git On the web: https://git.tartarus.org/?p=simon/tilings-rs.git Branch updated: main Committer: Simon Tatham Date: 2026-06-17 08:16:47 commit e3f5ecbc2900600fa6e96a384e32530b7d8e6f18 web diff https://git.tartarus.org/?p=simon/tilings-rs.git;a=commitdiff;h=e3f5ecbc2900600fa6e96a384e32530b7d8e6f18;hp=ed2dd2b65e5272dfa925ea3d3cd763199299f5c4 Author: Simon Tatham Date: Wed Jun 17 08:03:10 2026 +0100 Update to itertools 0.15.0. This version of the crate introduces the .circular_array_windows() method (as it happens, contributed by me), which replaces the .cyclic_pairs() method I implemented in src/common.rs. .circular_array_windows() returns an array whereas .cyclic_pairs() returned a tuple, so there were a small number of knock-on type changes, but not many, and not far-reaching. The main new thing in .circular_array_windows() is that it doesn't demand that the input iterator implement any additional traits like Clone, which makes it much more friendly to using in generic code than itertools's previous .circular_tuple_windows(). That's why I had my own .cyclic_pairs() in the first place instead of just using .circular_tuple_windows(). (Of course it still demands that the iterator's _items_ are Clone, in order to return each one in multiple windows. But that's all.) One case of this pattern where I couldn't _even_ use my own .cyclic_pairs() was in examples/cli.rs, because being an example, it couldn't use a purely internal private trait in the main crate. (And I couldn't bring myself to handle that by exposing cyclic_pairs() as public, because it would be silly if anyone found it useful and ended up pulling in this crate for something so irrelevant!) Cargo.lock | 4 ++-- Cargo.toml | 2 +- examples/cli.rs | 22 ++++++++-------------- src/common.rs | 45 --------------------------------------------- src/generators/raster.rs | 9 ++++----- src/geometric.rs | 7 +++---- src/test.rs | 4 ++-- 7 files changed, 20 insertions(+), 73 deletions(-) From tartarus-commits at lists.tartarus.org Wed Jun 17 12:53:30 2026 From: tartarus-commits at lists.tartarus.org (Commits to Tartarus hosted VCS) Date: Wed, 17 Jun 2026 12:53:30 +0100 Subject: simon-git: putty (main): Simon Tatham Message-ID: TL;DR: abbaa53c Normalise pathnames expanded from __FILE__. 4d01cc4c Fix appname in test_terminal.c. Repository: https://git.tartarus.org/simon/putty.git On the web: https://git.tartarus.org/?p=simon/putty.git Branch updated: main Committer: Simon Tatham Date: 2026-06-17 12:53:30 commit abbaa53c77f41f4f666c81f5a2f96e7564786a31 web diff https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=abbaa53c77f41f4f666c81f5a2f96e7564786a31;hp=026d2c17b5f390482afa15953479d96e6b009d3a Author: Simon Tatham Date: Sat Jun 13 11:17:32 2026 +0100 Normalise pathnames expanded from __FILE__. Currently, in binary builds of Windows PuTTY, every assertion failure message contains the full absolute pathname of the containing source file as checked out by my build system, which means it has some awkward mkstemp-style randomised directory name. This impacts build reproducibility, and also simply wastes space. The -fmacro-prefix-map option adjusts pathnames expanded from __FILE__, which would otherwise appear in a release binary. But it leaves alone pathnames used for debugging, including ELF .debug_info (so gdb's source-file tracking still works), and also pathnames in string literals passed to sanitiser check functions (so that ASan error reports still contain absolute pathnames). cmake/setup.cmake | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) commit 4d01cc4c3751c05560a4b1877c2760c4efb177af web diff https://git.tartarus.org/?p=simon/putty.git;a=commitdiff;h=4d01cc4c3751c05560a4b1877c2760c4efb177af;hp=abbaa53c77f41f4f666c81f5a2f96e7564786a31 Author: Simon Tatham Date: Wed Jun 17 12:48:51 2026 +0100 Fix appname in test_terminal.c. I noticed in passing that it called itself "test_lineedit" due to absent-minded copy and paste. Harmless ??? the difference would only ever have shown up in error message prefixes. But easy to fix. test/test_terminal.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) From tartarus-commits at lists.tartarus.org Wed Jun 17 13:18:45 2026 From: tartarus-commits at lists.tartarus.org (Commits to Tartarus hosted VCS) Date: Wed, 17 Jun 2026 13:18:45 +0100 Subject: simon-git: technicality (main): Simon Tatham Message-ID: TL;DR: f543e9c Add some more ellipsis variations. Repository: https://git.tartarus.org/simon/technicality.git On the web: https://git.tartarus.org/?p=simon/technicality.git Branch updated: main Committer: Simon Tatham Date: 2026-06-17 13:18:45 commit f543e9c7e2df9399a55d9c1004cb4352da65452b web diff https://git.tartarus.org/?p=simon/technicality.git;a=commitdiff;h=f543e9c7e2df9399a55d9c1004cb4352da65452b;hp=ac02390672adaa43f07c562a744165269cbc3423 Author: Simon Tatham Date: Wed Jun 17 13:16:05 2026 +0100 Add some more ellipsis variations. I wanted to use the centred horizontal ellipsis in a social media post recently, and it wasn't in Technicality (though I didn't let that stop me). While I'm here, it's easy enough to add the vertical and diagonal ones too. encoding-common.txt | 4 ++++ punctuation/backslashellipsis.mf | 38 ++++++++++++++++++++++++++++++++++++++ punctuation/midellipsis.mf | 23 +++++++++++++++++++++++ punctuation/slashellipsis.mf | 37 +++++++++++++++++++++++++++++++++++++ punctuation/vertellipsis.mf | 36 ++++++++++++++++++++++++++++++++++++ 5 files changed, 138 insertions(+)