Removed rpms ============ - openssh-server-config-rootlogin Added rpms ========== Package Source Changes ====================== kernel-default +- s390/cpum_cf: make crypto counters upward compatible across + machine types (bsc#1224348). +- commit 36c1e09 + +- cifs: fix underflow in parse_server_interfaces() (CVE-2024-26828 bsc#1223084). +- commit 40aba68 + +- mctp: perform route lookups under a RCU read-side lock + (CVE-2023-52483 bsc#1220738). +- commit 659b74f + +- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts + (bsc#1218562 CVE-2023-6270 CVE-2024-26898 bsc#1223016). +- commit bd4199d + openssh +- Add a warning in %post of openssh-clients, openssh-server and + openssh-server-config-disallow-rootlogin to warn the user if + the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not + being used (bsc#1223486). + +- Only for SLE15, restore the patch file removed in + Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour + from SP5 of having root password login allowed by default + (fixes bsc#1223486, related to bsc#1173067): + * openssh-7.7p1-allow_root_password_login.patch +- Since the default value for this config option is now set to + permit root to use password logins in SLE15, the + openssh-server-config-rootlogin subpackage isn't useful there so + we now create an openssh-server-config-disallow-rootlogin + subpackage that sets the configuration the other way around + than openssh-server-config-rootlogin. + +- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer, + added missing parameter (bsc#1222840) +