openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1879-1 Rating: moderate References: #1016709 #1017099 #1023275 #1024251 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for openssh provides the following fixes: - Enable specific ioctl calls for ICA crypto card on the zSeries platform. Without this patch, users using the IBMCA engine are not able to perform ssh login as the filter blocks the communication with the crypto card. (bsc#1016709) - Enable case-insensitive hostname matching. (bsc#1017099) - Add a new switch for printing diagnostic messages in sftp client's batch mode. (bsc#1023275) - Better fix for core dumps from auditing code when trying to bind to an unavailable port. (bsc#1024251) - Remove the limit on the amount of tasks sshd can run. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-817=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): openssh-7.2p2-11.3.1 openssh-askpass-gnome-7.2p2-11.3.1 openssh-askpass-gnome-debuginfo-7.2p2-11.3.1 openssh-cavs-7.2p2-11.3.1 openssh-cavs-debuginfo-7.2p2-11.3.1 openssh-debuginfo-7.2p2-11.3.1 openssh-debugsource-7.2p2-11.3.1 openssh-fips-7.2p2-11.3.1 openssh-helpers-7.2p2-11.3.1 openssh-helpers-debuginfo-7.2p2-11.3.1 References: https://bugzilla.suse.com/1016709 https://bugzilla.suse.com/1017099 https://bugzilla.suse.com/1023275 https://bugzilla.suse.com/1024251