{"id":"MGASA-2015-0098","summary":"Updated putty and filezilla packages fix CVE-2015-2157","details":"Updated putty and filezilla packages fix security vulnerability:\n\nPuTTY suite versions 0.51 to 0.63 fail to clear SSH-2 private key\ninformation from memory when loading and saving key files to disk,\nleading to potential disclosure. The issue affects keys stored on disk\nin encrypted and unencrypted form, and is present in PuTTY, Plink,\nPSCP, PSFTP, Pageant and PuTTYgen (CVE-2015-2157).\n\nThe putty package has been updated to version 0.64, fixing this and other\nissues.  The filezilla package, which contains a bundled version of PuTTY,\nhas also been updated, to version 3.10.2.\n","modified":"2026-04-16T06:25:06.620435096Z","published":"2015-03-06T18:08:57Z","upstream":["CVE-2015-2157"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2015-0098.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=15394"},{"type":"WEB","url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/private-key-not-wiped-2.html"},{"type":"WEB","url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2015/02/28/4"},{"type":"WEB","url":"https://filezilla-project.org/newsfeed.php"}],"affected":[{"package":{"name":"putty","ecosystem":"Mageia:4","purl":"pkg:rpm/mageia/putty?arch=source&distro=mageia-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.64-1.mga4"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2015-0098.json"}},{"package":{"name":"filezilla","ecosystem":"Mageia:4","purl":"pkg:rpm/mageia/filezilla?arch=source&distro=mageia-4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.2-1.mga4"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2015-0098.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}