Bug 905299 (CVE-2023-28531)

Summary:	<net-misc/openssh-9.3_p1: ssh-add adds keys without intended constraints
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	base-system
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://www.openwall.com/lists/oss-security/2023/03/15/8
Whiteboard:	A4 [glsa+]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-04-29 17:04:01 UTC

CVE-2023-28531:

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.

Comment 1 Larry the Git Cow gentoo-dev

2023-07-20 02:18:31 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=6394ef8ae23b1cf183b45b603eceea6389a3c371

commit 6394ef8ae23b1cf183b45b603eceea6389a3c371
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2023-07-20 02:17:18 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-07-20 02:18:28 +0000

    [ GLSA 202307-01 ] OpenSSH: Remote Code Execution
    
    Bug: https://bugs.gentoo.org/892936
    Bug: https://bugs.gentoo.org/905299
    Bug: https://bugs.gentoo.org/910553
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Sam James <sam@gentoo.org>

 glsa-202307-01.xml | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)