FEDORA-2026-12d6749851 — security update for nebula

stable

nebula-1.11.0-1.fc44

FEDORA-2026-12d6749851 created by fale 3 months ago for Fedora 44

Update to 1.11.0

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-12d6749851

This update has been submitted for testing by fale.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

This update has been pushed to testing.

3 months ago

This update's test gating status has been changed to 'passed'.

3 months ago

This update has been submitted for stable by bodhi.

2 months ago

This update has been pushed to stable.

2 months ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 months ago

in testing

3 months ago

in stable

2 months ago

approved

2 months ago

Builds

nebula-1.11.0-1.fc44

BZ#2438443 CVE-2026-25793 nebula: Nebula: Blocklist evasion via ECDSA Signature Malleability [fedora-43]

BZ#2489903 CVE-2026-39828 nebula: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions [fedora-all]

BZ#2490114 CVE-2026-39829 nebula: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters [fedora-all]

BZ#2490475 CVE-2026-39830 nebula: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses [fedora-all]

BZ#2493522 CVE-2026-39835 nebula: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate [fedora-all]

BZ#2494295 CVE-2026-27145 nebula: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries [fedora-all]

nebula-1.11.0-1.fc44

Automated Test Results

passed