{
  "cveId": "CVE-2025-297850",
  "url": "https://patchblox.com/security/cve/CVE-2025-297850",
  "summary": "CVE-2025-297850 is fixed in 2 products on 1 platform, first by OPENSUSE-SU-2025:20128-1, released December 30, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "shadowsocks-v2ray-plugin: This update for shadowsocks-v2ray-plugin, v2ray-core fixes the following issues:\n\nChanges in shadowsocks-v2ray-plugin...",
  "description": "This update for shadowsocks-v2ray-plugin, v2ray-core fixes the following issues:\n\nChanges in shadowsocks-v2ray-plugin:\n\n- Update version to 5.25.0\n  * Update v2ray-core to v5.25.0\n- Add update-vendor.patch, update v2ray-core to v5.33.0 (boo#1243954 and CVE-2025-297850)\n\nChanges in v2ray-core:\n\n- Fix CVE-2025-47911 and boo#1251404\n  * Add fix-CVE-2025-47911.patch\n  * Update golang.org/x/net to 0.45.0 in vendor\n\n- Update version to 5.38.0\n  * TLSMirror Connection Enrollment System\n  * Add TLSMirror Sequence Watermarking\n  * LSMirror developer preview protocol is now a part of mainline V2Ray\n  * proxy dns with NOTIMP error\n  * Add TLSMirror looks like TLS censorship resistant transport protocol\n    as a developer preview transport\n  * proxy dns with NOTIMP error\n  * fix false success from SOCKS server when Dispatch() fails\n  * HTTP inbound: Directly forward plain HTTP 1xx response header\n  * add a option to override domain used to query https record\n  * Fix bugs\n  * Update vendor\n\n- Update version to 5.33.0\n  * bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850)\n  * Update other vendor source\n\n- Update version to 5.31.0\n  * Add Dns Proxy Response TTL Control\n  * Fix call newError Base with a nil value error\n  * Update vendor (boo#1235164)\n\n- Update version to 5.29.3\n  * Enable restricted mode load for http protocol client\n  * Correctly implement QUIC sniffer when handling multiple initial packets\n  * Fix unreleased cache buffer in QUIC sniffing\n  * A temporary testing fix for the buffer corruption issue\n  * QUIC Sniffer Restructure\n\n- Update version to 5.22.0\n  * Add packetEncoding for Hysteria\n  * Add ECH Client Support\n  * Add support for parsing some shadowsocks links\n  * Add Mekya Transport\n  * Fix bugs",
  "published": "2025-12-30T17:02:04Z",
  "severity": "",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "shadowsocks-v2ray-plugin",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "5.25.0-bp160.1.1",
      "fix": "OPENSUSE-SU-2025:20128-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20128-1",
      "released": "2025-12-30T17:02:04Z"
    },
    {
      "platform": "linux",
      "product": "v2ray-core",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "5.40.0-bp160.1.1",
      "fix": "OPENSUSE-SU-2025:20128-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-20128-1",
      "released": "2025-12-30T17:02:04Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}