Back Linuxsecurity

openSUSE 16.0: go-sendxmpp Moderate Security Update 2026:20058

Linuxsecurity •LinuxSecurity Advisories • January 18, 2026

This update for go-sendxmpp fixes the following issues: Changes in go-sendxmpp: - Update to 0.15.1: Added * Add XEP-0359 Origin-ID to messages (requires go-xmpp >= v0.2.18). Changed * HTTP upload: Ignore timeouts on disco IQs as some components do not . - Upgrades the embedded golang.org/x/net to 0.46.0 * Fixes: bsc#1251461, CVE-2025-47911: various algorithms with quadratic complexity when parsing HTML documents * Fixes: bsc#1251677, CVE-2025-58190: excessive memory consumption by 'html.ParseFragment' when processing specially crafted input - Update to 0.15.0: Added: * Add flag --verbose to show debug information. * Add flag --recipients to specify recipients by file. * Add flag --retry-connect to try after a waiting time if the connection fails. * Add flag --retry-connect-max to specify the amount of retry attempts. * Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys. * Add support for punycode domains. Changed: *

- openSUSE Leap 16.0: go-sendxmpp-0.15.1-bp160.1.1

- openSUSE Leap 16.0:

go-sendxmpp-0.15.1-bp160.1.1

* bsc#1241814 * bsc#1251461 * bsc#1251677 References: * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

openSUSE 16.0: go-sendxmpp Moderate Security Update 2026:20058 Released The openSUSE 16.0 update for go-sendxmpp addresses several security issues, including vulnerabilities related to HTML parsing and excessive memory consumption. Key fixes include updates to version 0.15.1 and the embedded golang.org/x/net to version 0.46.0, along with the addition of XEP-0359 Origin-ID to messages. 1 sources 33

Extracted Entities

CVEs (2)

CVE-2025-47911 CVE-2025-58190