Recommended update for openssh
This update for openssh provides the following fixes:
- Enable specific ioctl calls for ICA crypto card on the zSeries platform. Without this patch,
users using the IBMCA engine are not able to perform ssh login as the filter blocks the
communication with the crypto card. (bsc#1016709)
- Enable case-insensitive hostname matching. (bsc#1017099)
- Add a new switch for printing diagnostic messages in sftp client's batch mode. (bsc#1023275)
- Better fix for core dumps from auditing code when trying to bind to an unavailable port. (bsc#1024251)
- Remove the limit on the amount of tasks sshd can run.
This update was imported from the SUSE:SLE-12-SP2:Update update project.
-
Submitted by
Petr Cerny (pcerny)
Fixed bugs
bnc#1016709
[Regression] SLES 12 SP2 - Legacy Diffie-Hellman exchanges no longer work on ibmca engine via IBM crypto cards even when allowed in sshd_config (openssh/libica)
bnc#1017099
SSH Match conditions with uppercase hostnames fail
bnc#1023275
openssh, sftp: messages suppressed after upgrade from SLES 11 SP3 to SP4
bnc#1024251
sshd coredumps on bind error rather than graceful exit
