openSUSE Leap 16.0 nebula Important Update DoS CVE-2025-22869 20581-1

This update for nebula fixes the following issues:

Changes in nebula:

- Update to version 1.10.3:

* Fix an issue where blocklist bypass is possible when using curve P256

Any newly issued P256 based certificates will have their signature clamped

to the low-s form. Nebula will assert the low-s signature form when

validating certificates in a future version

- Update to version 1.10.2:

* Fix panic when using use_system_route_table

- Update to version 1.10.1:

* Fix a bug where an unsafe route derived from the system route table could

be lost on a config reload

* Fix the PEM banner for ECDSA P256 public keys

* Fix a bug in handshake processing when a peer sends an unexpected public key

* Add a config option to control accepting recv_error packets which defaults

to always

- Update to version 1.10.0:

* Support for ipv6 and multiple ipv4/6 addresses in the overlay

* Add the ability to mark packets on linux to better target nebula packets in

...