Bug 3551 - Which patches fixes the problem of adding smartcard keys to ssh-agent?
Summary: Which patches fixes the problem of adding smartcard keys to ssh-agent?
Status: NEW
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: ssh-agent (show other bugs)
Version: 9.3p1
Hardware: All All
: P5 security
Assignee: Assigned to nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-03-25 13:19 AEDT by renmingshuai
Modified: 2023-03-25 13:19 AEDT (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description renmingshuai 2023-03-25 13:19:34 AEDT 
OpenSSH 9.3 was released on 2023-03-15 and the release fixed one security bug about adding martcard keys to ssh-agent(1) with the per-hop destination constraints (ssh-add -h ...) added in OpenSSH 8.9. https://www.openssh.com/releasenotes.html.
I've learned about the destination constraints added in OpenSSH 8.9 and something about adding smart card keys to ssh-agent. The fix for this security issue appears to be https://anongit.mindrot.org/openssh.git/commit/?id=54ac4ab2b53c, but I'm not sure if there are other fixes.