[PuTTy] Alerte de sécurité

[Daimonos Tereutes]

Putty n'est pas sur le server de l'assoc, mais comme vous êtes nombreux à l'utiliser et que la faille me parait assez importante, je vous met un extrait de l'arte ci-dessous.
Pour résumer, mettez a jour votre soft

Synopsis
========

PuTTY contains a vulnerability allowing a SSH server to execute
arbitrary code on the connecting client.

Background
==========

PuTTY is a free implementation of Telnet and SSH for Win32 and Unix
platforms, along with an xterm terminal emulator.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-misc/putty <= 0.54 >= 0.55

Description
===========

PuTTY contains a vulnerability allowing a malicious server to execute
arbitrary code on the connecting client before host key verification.

Impact
======

When connecting to a server using the SSH2 protocol an attacker is able
to execute arbitrary code with the permissions of the user running
PuTTY by sending specially crafted packets to the client during the
authentication process but before host key verification.