4 ms·
The security holes are not critical but of course you should upgrade anyways. 3 of the holes have the following notice: We are currently unaware of any way in
by jontro 13y ago
The security holes are not critical but of course you should upgrade anyways.
3 of the holes have the following notice:
We are currently unaware of any way in which this can lead to remote code execution.
4th hole is that putty does not cleanup sensitive memory when it could.
- gcb0 13y ago3 better-safe-than-sorry-in-improbably-scenario ones and one that requires an attacker to have physical access to your machine (or just to your memory and a good freezer, if you remember that hack hack :) Seems like the best time to upgrade is in a few weeks after the crypto community had some time to analyse the changes. Maybe upgrading in a rush is as bad nowadays than not upgrading, with all the ... terrorism?... going on.