Original report from Evgeni Golov: http://bugs.debian.org/580323

I wanted to try ssh-tunneling with vinagre to one of
my vnc hosts.

The first try hung for a while, before spitting out an authentication timeout.
Retrying the connection, I noticed vinagre asks for a ssh password, but my host
prefers pubkey authentication. After disabling the pubkey, the hang disappeared,
but vinagre still failed to authenticate. Looking even stronger on the password
window, I noticed that it does not accept the last char of my password (which
is 9 chars long). So I changed the password to something shorter and voila,
vinagre could authenticate and I saw my vnc screen.

Thus we have two authentication bugs here:
1. vinagre fails to detect (and use) pubkey auth
2. vinagre only accepts passwords up to 8 chars

Both make the ssh tunneling feature quite useless, at least for me, as I neither
want to miss pubkeys (some of my hosts even do not allow anything else) nor
change the passwords to weak/short ones.