Ubuntu Security Notice USN-208-1 – An information disclosure vulnerability has been found in the SSH server. When the GSSAPIAuthentication option was enabled, the SSH server could send GSSAPI credentials even to users who attempted to log in with a method other than GSSAPI. This could inadvertently expose these credentials to an untrusted user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40778/usn-208-1.txt
Source: https://packetstormsecurity.com/files/40778/usn-208-1.txt.html