Ubuntu 15.10 USN-2869-1 Critical: OpenSSH Client Information Leak

ubuntu

January 14, 2016

OpenSSH could be made to expose sensitive information over the network.

Summary

OpenSSH could be made to expose sensitive information over the network.

Software Description:

- openssh: secure shell (SSH) for secure access to remote machines

Details:

It was discovered that the OpenSSH client experimental support for resuming

connections contained multiple security issues. A malicious server could

use this issue to leak client memory to the server, including private

client user keys.

Topics Covered

security advisory security issue information leak critical Ubuntu OpenSSH network

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  openssh-client                  1:6.9p1-2ubuntu0.1

Ubuntu 15.04:
  openssh-client                  1:6.7p1-5ubuntu1.4

Ubuntu 14.04 LTS:
  openssh-client                  1:6.6p1-2ubuntu2.4

Ubuntu 12.04 LTS:
  openssh-client                  1:5.9p1-5ubuntu1.8

In general, a standard system update will make all the necessary changes.