Security update for openssh (important)

An update that fixes four vulnerabilities is now available.

Description:

This update for openssh fixes the following issues:

Security issues fixed:

• CVE-2018-20685: Fixed an issue where scp client allows remote SSH
  servers to bypass intended access restrictions (bsc#1121571)
• CVE-2019-6109: Fixed an issue where the scp client would allow malicious
  remote SSH servers to manipulate terminal output via the object name,
  e.g. by inserting ANSI escape sequences (bsc#1121816)
• CVE-2019-6110: Fixed an issue where the scp client would allow malicious
  remote SSH servers to manipulate stderr output, e.g. by inserting ANSI
  escape sequences (bsc#1121818)
• CVE-2019-6111: Fixed an issue where the scp client would allow malicious
  remote SSH servers to execute directory traversal attacks and overwrite
  files (bsc#1121821)

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.0:

  zypper in -t patch openSUSE-2019-91=1