Major security hole found in libssh

https://www.bleepingcomputer.com/ne...ners-and-exploits-released-apply-updates-now/

This cartoon explains it easily:

 

Most distro's would have had this sorted by now through automatic security updates. All my Ubuntu machines did.

 

And, indeed, most distros are probably only using libssl on the CLIENT side, not on the server side. This does not, for example, affect openssh or dropbear

 

Will a winblows exe be released to allow the uneducated of us to scan our local networks for vulnerable devices ?
or do i need to fire up a raspberry pi and run the python script ?

 

Are you running any ssh servers?

 

I have some TinyCore powered Raspberry Pi's that run logitech media server and i'm not sure what it uses for authentication ...
God only knows what other IOT connected devices have on board and let wide open ..

edit - and a boxen running XPenology that will definitely be an open target ..
I dont have them pointed out directly... but a number of *cough* download services are running wild