Back Linuxsecurity openSUSE: go-sendxmpp Important Memory Issues CVE-2025-47911 2025:0493
This update for go-sendxmpp fixes the following issues: Update to 0.15.1: - Added * Add XEP-0359 Origin-ID to messages (requires go-xmpp >= v0.2.18). - Changed * HTTP upload: Ignore timeouts on disco IQs as some components do not . - Upgrades the embedded golang.org/x/net to 0.46.0 * Fixes: boo#1251461, CVE-2025-47911: various algorithms with quadratic complexity when parsing HTML documents * Fixes: boo#1251677, CVE-2025-58190: excessive memory consumption by 'html.ParseFragment' when processing specially crafted input
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2025-493=1
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP6:
zypper in -t patch openSUSE-2025-493=1
- openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): go-sendxmpp-0.15.1-bp156.2.9.1
- openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64):
go-sendxmpp-0.15.1-bp156.2.9.1
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
