-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-12d4cde449 2026-07-02 01:07:29.331951+00:00 --------------------------------------------------------------------------------
Name : opkssh Product : Fedora 43 Version : 0.14.0 Release : 3.fc43 URL : https://github.com/openpubkey/opkssh Summary : OpenPubkey SSH Description : OpenPubkey SSH is a tool which enables ssh to be used with OpenID Connect allowing SSH access to be managed via identities like alice@example.com instead of long-lived SSH keys.
-------------------------------------------------------------------------------- Update Information:
Update bundled golang.org/x/crypto to 0.53.0 -------------------------------------------------------------------------------- ChangeLog:
* Mon Jun 22 2026 Till Hofmann thofmann@fedoraproject.org - 0.14.0-3 - Update bundled golang.org/x/crypto to 0.53.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2489950 - CVE-2026-39828 opkssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2489950 [ 2 ] Bug #2490498 - CVE-2026-39830 opkssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2490498 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-12d4cde449' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------