SUSE-RU-2017:0275-1: important: Recommended update for openssh

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for openssh
______________________________________________________________________________

Announcement ID:    SUSE-RU-2017:0275-1
Rating:             important
References:         #1021626 
Affected Products:
                    SUSE Linux Enterprise Server for Raspberry Pi 12-SP2
                    SUSE Linux Enterprise Server 12-SP2
                    SUSE Linux Enterprise Desktop 12-SP2
______________________________________________________________________________

   An update that has one recommended fix can now be installed.

Description:


   This update for openssh fixes the following issues:

   - A previous update contained a logic flaw that broke OpenSSH's
     interpretation
     of the "DenyUser" config option. That regression could have lead to an
      exact inversion of the intended meaning, i.e. OpenSSH could have locked
      out all users except the one that was supposed to be denied access.
      [bsc#1021626]


Patch Instructions:

   To install this SUSE Recommended Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:

      zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-147=1

   - SUSE Linux Enterprise Server 12-SP2:

      zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-147=1

   - SUSE Linux Enterprise Desktop 12-SP2:

      zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-147=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64):

      openssh-7.2p2-69.1
      openssh-askpass-gnome-7.2p2-69.3
      openssh-askpass-gnome-debuginfo-7.2p2-69.3
      openssh-debuginfo-7.2p2-69.1
      openssh-debugsource-7.2p2-69.1
      openssh-fips-7.2p2-69.1
      openssh-helpers-7.2p2-69.1
      openssh-helpers-debuginfo-7.2p2-69.1

   - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le x86_64):

      openssh-7.2p2-69.1
      openssh-askpass-gnome-7.2p2-69.3
      openssh-askpass-gnome-debuginfo-7.2p2-69.3
      openssh-debuginfo-7.2p2-69.1
      openssh-debugsource-7.2p2-69.1
      openssh-fips-7.2p2-69.1
      openssh-helpers-7.2p2-69.1
      openssh-helpers-debuginfo-7.2p2-69.1

   - SUSE Linux Enterprise Desktop 12-SP2 (x86_64):

      openssh-7.2p2-69.1
      openssh-askpass-gnome-7.2p2-69.3
      openssh-askpass-gnome-debuginfo-7.2p2-69.3
      openssh-debuginfo-7.2p2-69.1
      openssh-debugsource-7.2p2-69.1
      openssh-helpers-7.2p2-69.1
      openssh-helpers-debuginfo-7.2p2-69.1


References:

   https://bugzilla.suse.com/1021626