{"id":"openSUSE-SU-2026:22189-1","summary":"Security update for shadowsocks-rust, shadowsocks-libev","details":"This update for shadowsocks-rust, shadowsocks-libev fixes the following issues:\n\nChanges in shadowsocks-rust:\n\n- Fix SELinux denial (name_connect) when forwarding outbound TCP traffic\n  (boo#1284975)\n\n- Fix: Unable to bind ports below 1024 with SELinux enabled (boo#1284025)\n\n- Update version to 1.25.0\n  * Allow chaining ssserver to another SOCKS5/HTTP/HTTPS proxy\n  * Expose user_key() on CryptoStream and ProxyServerStream, lets callers\n    identify which multi-user identity was authenticated after an AEAD-2022 handshake\n  * EIH (Extended Identity Header) support\n  * local-http: Support HTTP Basic auth\n  * service: Outbound UDP relay through SOCKS5-only chains. UDP traffic can\n    now be relayed through proxy chains when all hops are SOCKS5. Chains containing\n    HTTP/HTTPS hops will emit a startup warning and UDP traffic will bypass the chain.\n  * socket2::Socket with socket2::SockRef\n  * Fix bugs\n    * CVE-2026-25541 and boo#1274441\n    * CVE-2026-93599, CVE-2026-93602, CVE-2026-93601, CVE-2026-93600 and boo#1282208\n    * CVE-2026-25541 and boo#1274441\n\n  * Fix some issues (CVE-2025-3416, boo#1242615)\n- Update vendor, fix boo#1215658 and CVE-2023-42811\n\nChanges in shadowsocks-libev:\n\n- Fix SELinux denial (name_connect) when forwarding outbound TCP traffic\n  (boo#1284975)\n\n- Fix build for Leap 16.1+: switch BuildRequires from mbedtls-devel to\n  mbedtls-3-devel Tumbleweed, don't do this work on Leap 16\n","modified":"2026-11-01T17:23:29.526023024Z","published":"2026-10-26T16:52:43Z","related":["CVE-2025-3416","CVE-2026-25541","CVE-2026-93599","CVE-2026-93600","CVE-2026-93601","CVE-2026-93602"],"upstream":["CVE-2025-3416","CVE-2026-25541","CVE-2026-93599","CVE-2026-93600","CVE-2026-93601","CVE-2026-93602"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1242615"},{"type":"REPORT","url":"https://bugzilla.suse.com/1274441"},{"type":"REPORT","url":"https://bugzilla.suse.com/1282208"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284025"},{"type":"REPORT","url":"https://bugzilla.suse.com/1284975"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-3416"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-25541"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93599"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93600"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93601"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-93602"}],"affected":[{"package":{"name":"shadowsocks-libev","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/shadowsocks-libev&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6-bp160.3.1"}]}],"ecosystem_specific":{"binaries":[{"libshadowsocks-libev2":"3.3.6-bp160.3.1","shadowsocks-libev-devel":"3.3.6-bp160.3.1","shadowsocks-rust":"1.25.0-bp160.1.1","shadowsocks-libev-apparmor":"3.3.6-bp160.3.1","shadowsocks-rust-apparmor":"1.25.0-bp160.1.1","shadowsocks-libev-doc":"3.3.6-bp160.3.1","shadowsocks-libev":"3.3.6-bp160.3.1","shadowsocks-libev-selinux":"3.3.6-bp160.3.1","shadowsocks-rust-selinux":"1.25.0-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22189-1.json"}},{"package":{"name":"shadowsocks-rust","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/shadowsocks-rust&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"shadowsocks-rust":"1.25.0-bp160.1.1","shadowsocks-libev-doc":"3.3.6-bp160.3.1","shadowsocks-libev-devel":"3.3.6-bp160.3.1","shadowsocks-libev":"3.3.6-bp160.3.1","shadowsocks-libev-selinux":"3.3.6-bp160.3.1","libshadowsocks-libev2":"3.3.6-bp160.3.1","shadowsocks-rust-apparmor":"1.25.0-bp160.1.1","shadowsocks-rust-selinux":"1.25.0-bp160.1.1","shadowsocks-libev-apparmor":"3.3.6-bp160.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22189-1.json"}}],"schema_version":"1.9.2"}