I am using qualys for security scan on Ubuntu 14.04 LTS. It is reporting these vulnerabilities CVE-2016-8858,CVE-2016-10009,CVE-2016-10010,CVE-2016-10011,CVE-2016-10012 which require openssh 7.4 .
This is a serious thing for us which is stopping us from being compliant. I want to know if there is an official way to update OpenSSH version to 7.4 in ubuntu 14 (https://stackoverflow.com/questions/36453976/upgrade-openssh-7-2p-in-ubuntu-14-04), or by when should I expect ubuntu to release security patches for these vulnerabilities.