openSUSE-SU-2026:21653-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21653-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21653-1
Upstream
CVE (5)
Related
CVE (5)
Published
2026-08-25T18:20:49Z
Modified
2026-08-27T18:23:13Z
Summary
Security update for v2ray-core
Details

This update for v2ray-core fixes the following issues:

Changes in v2ray-core:

  • Update version to 5.53.0

    • Add X-Forwarded-For support to gRPC transport
    • Add Stream based Packet Addr for UDP Connections
    • rrpit: compact session, async send, session recovery
    • Add socks5ify engineering command
    • Fix bugs
    • Update modules (boo#1276119 and CVE-2026-72817, CVE-2026-72815, CVE-2026-72816)

  • Update version to 5.51.2

    • Wireguard Add TCP Listener support for wireguard outbound
    • Stun Nat Type Testing
    • Better server failure detection and PreserveSourceIPPortWhenDestNATMapping detection
    • Improve API instance support
    • feat: grpc: allow configurable keepalive and initial windows size
    • Add RRPIT - Rapid Reliable Packet Interactive Transport
    • Add WebRTC Tunnel Support in V2Ray(unreleased)
    • also parse X-Forwarded-For in httpupgrade
    • gdocsviewer: Add Google Docs Viewer based transport
    • gdocsviewer: Refine poll logic and allow custom headers to reduce rate limiting
    • gdocsviewer: allow adding headers in public config
    • Fix bugs (boo#1258546 and CVE-2026-27017)

  • update golang.org/x/net to 0.55.0 to fix boo#1266787 and CVE-2026-39821

References

Affected packages

openSUSE:Leap 16.0 / v2ray-core

Package

Name
v2ray-core
Purl
pkg:rpm/opensuse/v2ray-core&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.53.0-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "golang-github-v2fly-v2ray-core":  "5.53.0-bp160.1.1",
            "v2ray-core":  "5.53.0-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21653-1.json"