putty -- security update

2015-03-15T00:00:00
ID DSA-3190
Type debian
Reporter Debian
Modified 2015-03-15T00:00:00

Description

Patrick Coleman discovered that the Putty SSH client failed to wipe out unused sensitive memory.

In addition Florent Daigniere discovered that exponential values in Diffie Hellman exchanges were insufficienty restricted.

For the stable distribution (wheezy), this problem has been fixed in version 0.62-9+deb7u2.

For the upcoming stable distribution (jessie), this problem has been fixed in version 0.63-10.

For the unstable distribution (sid), this problem has been fixed in version 0.63-10.

We recommend that you upgrade your putty packages.