[Bug 3551] New: Which patches fixes the problem of adding smartcard keys to ssh-agent?

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sat Mar 25 13:19:34 AEDT 2023


https://bugzilla.mindrot.org/show_bug.cgi?id=3551

            Bug ID: 3551
           Summary: Which patches fixes the problem of adding smartcard
                    keys to ssh-agent?
           Product: Portable OpenSSH
           Version: 9.3p1
          Hardware: All
                OS: All
            Status: NEW
          Severity: security
          Priority: P5
         Component: ssh-agent
          Assignee: unassigned-bugs at mindrot.org
          Reporter: rmsh1216 at 163.com

OpenSSH 9.3 was released on 2023-03-15 and the release fixed one
security bug about adding martcard keys to ssh-agent(1) with the
per-hop destination constraints (ssh-add -h ...) added in OpenSSH 8.9.
https://www.openssh.com/releasenotes.html.
I've learned about the destination constraints added in OpenSSH 8.9 and
something about adding smart card keys to ssh-agent. The fix for this
security issue appears to be
https://anongit.mindrot.org/openssh.git/commit/?id=54ac4ab2b53c, but
I'm not sure if there are other fixes.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list