New release for the popular PuTTy program that finally reached version 0.71 and fixes bugs that allowed fake connection requests.
The latest version of the PuTTY SSH and Telnet client , released on 16-3-2019, adds protection against spoofed login requests and terminal authentication, which are intended to steal login information. The new version 0.71 comes after 20 months of inactivity and fixes a total of eight security issues.
Five of the vulnerabilities fixed in PuTTY 0.71 were found through the bug bounty , which had set a reward of €90,000 for anyone reporting bugs and holes in the software with its twenty-year history on the internet.
However, PuTTY 0.71 also fixes a serious overflow bug that was present in all previous versions of the client. Another major vulnerability reported (via the European Union's bounty program) concerns the hijacking of the help file (.CHM format) in the Windows version of PuTTY.
Here you can see the list of all the fixes made in version 0.71. You can download version 0.71 from here.
