Update Info

openSUSE-2026-100


Security update for v2ray-core


Type: security
Severity: important
Issued: 2026-03-27
Description:
This update for v2ray-core fixes the following issues:

- Update version to 5.47.0
  * Add sticky choice option for leastping
  * Add support for enrollment links in tlsmirror
  * Add Wireguard Outbound (unreleased)
  * Add sticky choice option for leastping
  * Generalize IP address parsing in TUN stack options
  * Fix bugs

- CVE-2026-33186:  google.golang.org/grpc: authorization bypass due to 
  improper validation of the HTTP/2 :path pseudo-header (boo#1260329)

- Update version to 5.44.1
  * uTLS: bundled library updated to v1.8.2 for Chrome120 imitation profile
    identification
  * Update golang toolchain to v1.25.6, which fixed an vulnerable
    (tls.Config).Clone function
  * Fix bugs

- Update version to 5.42.0
  * Add TLSMirror bootstrap enrollment and self enrollment feature
  * TLSMirror Inverse Role Request Tripper Enrollment Server Support

- CVE-2025-47911: v2ray-core: golang.org/x/net/html: various algorithms with
  quadratic complexity when parsing HTML documents (boo#1251404)
  * Update golang.org/x/net to 0.45.0 in vendor

- Update version to 5.38.0
  * TLSMirror Connection Enrollment System
  * Add TLSMirror Sequence Watermarking
  * LSMirror developer preview protocol is now a part of mainline V2Ray
  * proxy dns with NOTIMP error
  * Add TLSMirror looks like TLS censorship resistant transport protocol
    as a developer preview transport
  * proxy dns with NOTIMP error
  * fix false success from SOCKS server when Dispatch() fails
  * HTTP inbound: Directly forward plain HTTP 1xx response header
  * add a option to override domain used to query https record
  * Fix bugs
  * Update vendor


              

Packages


  • v2ray-core-5.47.0-bp156.2.6.1