UbuntuUpdates.org

Package "putty-tools"

Name: putty-tools

Description:

command-line tools for SSH, SCP, and SFTP
Latest version: 0.62-6ubuntu0.1
Release: precise (12.04)
Level: security
Repository: universe
Head package: putty

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "putty-tools"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "putty-tools" in Precise

Repository Area Version
base universe 0.62-6
updates universe 0.62-6ubuntu0.1

Changelog

Version: 0.62-6ubuntu0.1 2013-08-07 14:06:55 UTC

  putty (0.62-6ubuntu0.1) precise-security; urgency=low

  * CVE-2013-4206: Buffer underrun in modmul could corrupt the heap.
  * CVE-2013-4852: Negative string length in public-key signatures could
    cause integer overflow and overwrite all of memory (closes: #718779).
  * CVE-2013-4207: Non-coprime values in DSA signatures can cause buffer
    overflow in modular inverse.
  * CVE-2013-4208: Private keys were left in memory after being used by
    PuTTY tools.
  * Backport some general proactive potentially-security-relevant tightening
    from upstream.
 -- Colin Watson <email address hidden> Wed, 07 Aug 2013 11:44:22 +0100
718779 putty: CVE-2013-4852 - Debian Bug report logs
CVE-2013-4852 PuTTY SSH handshake heap overflow


About   -   Send Feedback to @ubuntu_updates