The OpenSSH team has been made aware of an attack against the SSH protocol version 2 by researchers at the University of London. Unfortunately, due to the report lacking any detailed technical description of the attack and CPNI’s unwillingness to share necessary information, they are unable to properly assess its impact.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72173/openssh-cbc-adv.txt
Source: https://packetstormsecurity.com/files/72173/openssh-cbc-adv.txt.html