UbuntuUpdates.org

Package "putty"

Name: putty

Description:

Telnet/SSH client for X
Latest version: 0.62-6ubuntu0.1
Release: precise (12.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "putty"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "putty" in Precise

Repository Area Version
base universe 0.62-6
security universe 0.62-6ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.62-6ubuntu0.1 2013-08-07 15:07:00 UTC

  putty (0.62-6ubuntu0.1) precise-security; urgency=low

  * CVE-2013-4206: Buffer underrun in modmul could corrupt the heap.
  * CVE-2013-4852: Negative string length in public-key signatures could
    cause integer overflow and overwrite all of memory (closes: #718779).
  * CVE-2013-4207: Non-coprime values in DSA signatures can cause buffer
    overflow in modular inverse.
  * CVE-2013-4208: Private keys were left in memory after being used by
    PuTTY tools.
  * Backport some general proactive potentially-security-relevant tightening
    from upstream.
 -- Colin Watson <email address hidden> Wed, 07 Aug 2013 11:44:22 +0100
718779 putty: CVE-2013-4852 - Debian Bug report logs
CVE-2013-4852 PuTTY SSH handshake heap overflow


About   -   Send Feedback to @ubuntu_updates