SECURITY

Ubuntu Security Notice USN-2869-1 14th January, 2016 openssh vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Ubuntu 15.04 Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary OpenSSH could be made to expose sensitive information over the network. Software description openssh – secure shell (SSH) for secure access to remote machines Details It was discovered that the OpenSSH client experimental support for resumingconnections contained multiple security issues. A malicious server coulduse this issue to leak client memory to the server, including privateclient user keys. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 15.10: openssh-client 1:6.9p1-2ubuntu0.1 Ubuntu 15.04: openssh-client 1:6.7p1-5ubuntu1.4 Ubuntu 14.04 LTS: openssh-client 1:6.6p1-2ubuntu2.4 Ubuntu 12.04 LTS: openssh-client 1:5.9p1-5ubuntu1.8 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all [ more… ]