1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 3190-1] putty security update

    From Moritz Muehlenhoff@1:229/2 to All on Sun Mar 15 21:10:03 2015
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3190-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff
    March 15, 2015 http://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : putty
    CVE ID : CVE-2015-2157

    Patrick Coleman discovered that the Putty SSH client failed to wipe out
    unused sensitive memory.

    In addition Florent Daigniere discovered that exponential values in
    Diffie Hellman exchanges were insufficienty restricted.

    For the stable distribution (wheezy), this problem has been fixed in
    version 0.62-9+deb7u2.

    For the upcoming stable distribution (jessie), this problem has been
    fixed in version 0.63-10.

    For the unstable distribution (sid), this problem has been fixed in
    version 0.63-10.

    We recommend that you upgrade your putty packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1

    iQIcBAEBAgAGBQJVBeHQAAoJEBDCk7bDfE429eEQAIQMR7zpK9pxHxIicBHTiSAB Gu8KP86VoAt8Ra/qrsccjRdGOOjL8erZamdbU+/l2dObVpSeu7YaMIrQ7TD1oUjN ugJIey9IMTQ8b/YP8IOOOdA/huqh9na9IPq8zmgBs6plxQmOOKwBBF1qxHQN9/kq TvTDUMGRqWa2R3s/ihyNaoT6VepuuTZJIlde0nY+j8AYRFi+03VCrIOU/nO7GzaU GV7wyBKVBy08zUS0ECVHWK+JQna2cN7o0CW5BF+tkLz6BgPb8cgij/ri+r3orz6u lfm92CGcg7OpVADXg2lISMeJUOSzjUxoa3qfuL/29ynVnc0v34EnR4Ii/yM2G6X3 ZnGjHUxCzVqcogDHvm8w5sIPxYfh4Lo3DIq33OKyo5UqzPIwyS4wT5t5sqd7V5HE F/51RuMw1avqx7Ls37YzB548a8APKCWJuJ2R2CYwJoBlEbigw5tz5vhbl5Wmg5zn hMIbLiTfCCx8fu9Nhy3rYyRCILdp0JrGsK7epjov/lQB4eVn90LM2tSv46UxnsVM 248l86X3vGcBLg4t9wuUxgxogXfExyIpeT5KbYFX02QY9k7dvc9kprU7jnBh/38Y ANBfFdoVUMUjhIDQkAiaPx6/OhlJUhE0b+Bhe8RYij2+Q7mJWEj/CWvWoMVX2LWD TkO2D/bCkF9alGb1FkBc
    =1n2w
    -----END PGP SIGNATURE-----


    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: https://lists.debian.org/[email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)