==========================================================================
Ubuntu Security Notice USN-3795-1
October 17, 2018

libssh vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

libssh could allow unintended access to network services.

Software Description:
– libssh: A tiny C SSH library

Details:

Peter Winter-Smith discovered that libssh incorrectly handled
authentication when being used as a server. A remote attacker could use
this issue to bypass authentication without any credentials.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
libssh-4 0.8.0~20170825.94fa1e38-1ubuntu0.1

Ubuntu 16.04 LTS:
libssh-4 0.6.3-4.3ubuntu0.1

Ubuntu 14.04 LTS:
libssh-4 0.6.1-0ubuntu3.4

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
https://usn.ubuntu.com/usn/usn-3795-1
CVE-2018-10933

Package Information:
https://launchpad.net/ubuntu/+source/libssh/0.8.0~20170825.94fa1e38-1ubuntu0.1
https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.1
https://launchpad.net/ubuntu/+source/libssh/0.6.1-0ubuntu3.4

—–BEGIN PGP SIGNATURE—–
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=3PaM
—–END PGP SIGNATURE—–
—