> USN-8577-1: OpenSSH vulnerability
[DATE: 21/07/2026 12:17]
[LANGUAGE: EN]
USN-8222-1 fixed a vulnerability in OpenSSH. This update provides the
corresponding fix for Ubuntu 16.04 LTS.
Original advisory details:
Vladimir Tokarev discovered that OpenSSH incorrectly handled certificates
with the principal name containing a comma character when using user-trusted
CA keys in authorized_keys and an authorized_keys principals="" option
that lists more than one principal. This could result in inappropriate
principal matching, contrary to expectations. (CVE-2026-35414)