SUSE Package Hub - openSUSE-2025-365

Update Info

openSUSE-2025-365

Security update for shadowsocks-v2ray-plugin

Type: security

Severity: moderate

Issued: 2025-09-18

Description:

This update for shadowsocks-v2ray-plugin fixes the following issues:

Update version to 5.37.0

* Update v2ray-core to 5.37.0
* Fixed CVE-2025-29785 in dependency ackhandler (bsc#1243954)

References

CVE: CVE-2025-297850
Bugzilla: 1243954 VUL-0: CVE-2025-29785: shadowsocks-v2ray-plugin: github.com/quic-go/quic-go/internal/ackhandler: loss recovery logic for path probe packets can be used by a malicious QUIC client to trigger a null pointer dereference

Packages

shadowsocks-v2ray-plugin-5.37.0-bp157.2.3.1