diff --git a/openssh-7.6p1-audit.patch b/openssh-7.6p1-audit.patch index 2c7ddc5..a32abc9 100644 --- a/openssh-7.6p1-audit.patch +++ b/openssh-7.6p1-audit.patch @@ -2093,7 +2093,7 @@ diff -up openssh-8.6p1/sshd-session.c.audit openssh-8.6p1/sshd-session.c +#endif /* WITH_OPENSSL */ + case KEY_ED25519_CERT: + case KEY_ED25519: -+ return (k->ed25519_pk != NULL); ++ return (k->ed25519_sk != NULL); + default: + /* fatal("key_is_private: bad key type %d", k->type); */ + return 0; diff --git a/openssh.spec b/openssh.spec index 9d7c632..7f39986 100644 --- a/openssh.spec +++ b/openssh.spec @@ -722,6 +722,8 @@ test -f %{sysconfig_anaconda} && \ * Wed Mar 18 2026 Zoltan Fridrich - 9.9p1-23 - Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode Resolves: RHEL-88565 +- Fix duplicate audit log entry when destroying ed25519 private keys + Resolves: RHEL-46782 * Thu Mar 12 2026 Zoltan Fridrich - 9.9p1-22 - Remove recommendation of p11-kit