CVE-2025-297850
golang-github-teddysun-v2ray-plugin-5.25.0-1.1 on GA media
These are all security issues fixed in the golang-github-teddysun-v2ray-plugin-5.25.0-1.1 package on the GA media of openSUSE Tumbleweed.
What each source reports
OSVopenSUSE-SU-2025:15193-1 No score
golang-github-teddysun-v2ray-plugin-5.25.0-1.1 on GA media
These are all security issues fixed in the golang-github-teddysun-v2ray-plugin-5.25.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15193-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15195-1 No score
golang-github-v2fly-v2ray-core-5.33.0-1.1 on GA media
These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.33.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15195-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:20128-1 No score
Security update for shadowsocks-v2ray-plugin, v2ray-core
This update for shadowsocks-v2ray-plugin, v2ray-core fixes the following issues:
Changes in shadowsocks-v2ray-plugin:
- Update version to 5.25.0
- Update v2ray-core to v5.25.0
- Add update-vendor.patch, update v2ray-core to v5.33.0 (boo#1243954 and CVE-2025-297850)
Changes in v2ray-core:
-
Fix CVE-2025-47911 and boo#1251404
- Add fix-CVE-2025-47911.patch
- Update golang.org/x/net to 0.45.0 in vendor
-
Update version to 5.38.0
- TLSMirror Connection Enrollment System
- Add TLSMirror Sequence Watermarking
- LSMirror developer preview protocol is now a part of mainline V2Ray
- proxy dns with NOTIMP error
- Add TLSMirror looks like TLS censorship resistant transport protocol as a developer preview transport
- proxy dns with NOTIMP error
- fix false success from SOCKS server when Dispatch() fails
- HTTP inbound: Directly forward plain HTTP 1xx response header
- add a option to override domain used to query https record
- Fix bugs
- Update vendor
-
Update version to 5.33.0
- bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850)
- Update other vendor source
-
Update version to 5.31.0
- Add Dns Proxy Response TTL Control
- Fix call newError Base with a nil value error
- Update vendor (boo#1235164)
-
Update version to 5.29.3
- Enable restricted mode load for http protocol client
- Correctly implement QUIC sniffer when handling multiple initial packets
- Fix unreleased cache buffer in QUIC sniffing
- A temporary testing fix for the buffer corruption issue
- QUIC Sniffer Restructure
-
Update version to 5.22.0
- Add packetEncoding for Hysteria
- Add ECH Client Support
- Add support for parsing some shadowsocks links
- Add Mekya Transport
- Fix bugs
- Record
openSUSE-SU-2025:20128-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
shadowsocks-v2ray-pluginopenSUSE:Tumbleweed |
before 5.25.0-1.1 | 5.25.0-1.1 |
v2ray-coreopenSUSE:Tumbleweed |
before 5.33.0-1.1 | 5.33.0-1.1 |
shadowsocks-v2ray-pluginopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 5.25.0-bp160.1.1 | 5.25.0-bp160.1.1 |
v2ray-coreopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 5.40.0-bp160.1.1 | 5.40.0-bp160.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-297850 is a vulnerability with no CVSS score yet in shadowsocks-v2ray-plugin, published June 2, 2025. No source lists public exploit code. Fixed in shadowsocks-v2ray-plugin 5.25.0-1.1.
References
lists.opensuse.org/archives/list/[email protected]/thread/6VC5VIU6SCJITOKTLOBAGZU62Z2CRZJH
suse.com/security/cve/CVE-2025-297850
lists.opensuse.org/archives/list/[email protected]/thread/JV7NP5OZ7ALMJGBCJN5YCPVJGO2QVZPR
bugzilla.suse.com/1235164
bugzilla.suse.com/1243946
bugzilla.suse.com/1243954
bugzilla.suse.com/1251404
suse.com/security/cve/CVE-2025-47911