PT-2026-33684 · Julia · Openssh Jll

Publicado 2026-04-09 · Atualizado 2026-04-09

OSV

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.

Identificadores relacionados

JLSEC-2026-69

Produtos afetados

Openssh Jll

Referências · 8

• https://github.com/openssh/openssh-portable/commit/881d9c6af9da4257c69c327c4e2f1508b2fa754b · Nota
• https://debian.org/security/2023/dsa-5586 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20240105-0005 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-69 · Aviso do Fabricante
• https://openwall.com/lists/oss-security/2023/12/18/2 · Nota
• https://support.apple.com/kb/HT214084 · Nota
• https://openssh.com/txt/release-9.6 · Nota
• http://seclists.org/fulldisclosure/2024/Mar/21 · Nota