openSUSE-SU-2026:22189-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22189-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22189-1

Upstream

CVE (6)

Related

CVE (6)

Published

2026-10-26T16:52:43Z

Modified

2026-11-01T17:23:29Z

Summary

Security update for shadowsocks-rust, shadowsocks-libev

Details

This update for shadowsocks-rust, shadowsocks-libev fixes the following issues:

Changes in shadowsocks-rust:

Fix SELinux denial (name_connect) when forwarding outbound TCP traffic (boo#1284975)
Fix: Unable to bind ports below 1024 with SELinux enabled (boo#1284025)
Update version to 1.25.0
- Allow chaining ssserver to another SOCKS5/HTTP/HTTPS proxy
- Expose user_key() on CryptoStream and ProxyServerStream, lets callers identify which multi-user identity was authenticated after an AEAD-2022 handshake
- EIH (Extended Identity Header) support
- local-http: Support HTTP Basic auth
- service: Outbound UDP relay through SOCKS5-only chains. UDP traffic can now be relayed through proxy chains when all hops are SOCKS5. Chains containing HTTP/HTTPS hops will emit a startup warning and UDP traffic will bypass the chain.
- socket2::Socket with socket2::SockRef
- Fix bugs
  - CVE-2026-25541 and boo#1274441
  - CVE-2026-93599, CVE-2026-93602, CVE-2026-93601, CVE-2026-93600 and boo#1282208
  - CVE-2026-25541 and boo#1274441
- Fix some issues (CVE-2025-3416, boo#1242615)
Update vendor, fix boo#1215658 and CVE-2023-42811

Changes in shadowsocks-libev:

Fix SELinux denial (name_connect) when forwarding outbound TCP traffic (boo#1284975)
Fix build for Leap 16.1+: switch BuildRequires from mbedtls-devel to mbedtls-3-devel Tumbleweed, don't do this work on Leap 16

References

Affected packages

openSUSE:Leap 16.0 / shadowsocks-libev

Package

Name: shadowsocks-libev
Purl: pkg:rpm/opensuse/shadowsocks-libev&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.3.6-bp160.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "libshadowsocks-libev2":  "3.3.6-bp160.3.1",
            "shadowsocks-libev":  "3.3.6-bp160.3.1",
            "shadowsocks-libev-apparmor":  "3.3.6-bp160.3.1",
            "shadowsocks-libev-devel":  "3.3.6-bp160.3.1",
            "shadowsocks-libev-doc":  "3.3.6-bp160.3.1",
            "shadowsocks-libev-selinux":  "3.3.6-bp160.3.1",
            "shadowsocks-rust":  "1.25.0-bp160.1.1",
            "shadowsocks-rust-apparmor":  "1.25.0-bp160.1.1",
            "shadowsocks-rust-selinux":  "1.25.0-bp160.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22189-1.json"

openSUSE:Leap 16.0 / shadowsocks-rust

Package

Name: shadowsocks-rust
Purl: pkg:rpm/opensuse/shadowsocks-rust&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.25.0-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "libshadowsocks-libev2":  "3.3.6-bp160.3.1",
            "shadowsocks-libev":  "3.3.6-bp160.3.1",
            "shadowsocks-libev-apparmor":  "3.3.6-bp160.3.1",
            "shadowsocks-libev-devel":  "3.3.6-bp160.3.1",
            "shadowsocks-libev-doc":  "3.3.6-bp160.3.1",
            "shadowsocks-libev-selinux":  "3.3.6-bp160.3.1",
            "shadowsocks-rust":  "1.25.0-bp160.1.1",
            "shadowsocks-rust-apparmor":  "1.25.0-bp160.1.1",
            "shadowsocks-rust-selinux":  "1.25.0-bp160.1.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22189-1.json"