Bug 3551

Summary:	Which patches fixes the problem of adding smartcard keys to ssh-agent?
Product:	Portable OpenSSH	Reporter:	renmingshuai <rmsh1216>
Component:	ssh-agent	Assignee:	Assigned to nobody <unassigned-bugs>
Status:	NEW ---
Severity:	security
Priority:	P5
Version:	9.3p1
Hardware:	All
OS:	All

Description renmingshuai 2023-03-25 13:19:34 AEDT

OpenSSH 9.3 was released on 2023-03-15 and the release fixed one security bug about adding martcard keys to ssh-agent(1) with the per-hop destination constraints (ssh-add -h ...) added in OpenSSH 8.9. https://www.openssh.com/releasenotes.html.
I've learned about the destination constraints added in OpenSSH 8.9 and something about adding smart card keys to ssh-agent. The fix for this security issue appears to be https://anongit.mindrot.org/openssh.git/commit/?id=54ac4ab2b53c, but I'm not sure if there are other fixes.