CVE catalog

CVE-2023-42811

Security update for rage-encryption

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.23% · Oct 27, 2026

These are all security issues fixed in the shadowsocks-rust-1.16.2-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensuseshadowsocks-rusttumbleweed1.16.2-1.1fixed
Suserage-encryptionlinux enterprise module for basesystem 15 sp50.9.2+0-150500.3.3.1fixed
Opensuserage-encryptionleap 15.50.9.2+0-150500.3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensuseshadowsocks-rustrpmtumbleweed1.16.2-1.1Not reportedOPENSUSE-SU-2024:13315-1Not reported
Suserage-encryptionrpmlinux enterprise module for basesystem 15 sp50.9.2+0-150500.3.3.1Not reportedSUSE-SU-2023:4060-1Not reported
Opensuserage-encryptionrpmleap 15.50.9.2+0-150500.3.3.1Not reportedSUSE-SU-2023:4060-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [shadowsocks-rust-apparmor]Unknown

    Source package: [shadowsocks-rust]

    Details (1)

    • 1.24.0-4.3 · noarch · tumbleweed

      Unknown · Fixed: 1.16.2-1.1

      Version impact unknown

      pypi · shadowsocks-rust · opensuse · tumbleweed

  • [shadowsocks-rust-selinux]Unknown

    Source package: [shadowsocks-rust]

    Details (1)

    • 1.24.0-4.3 · noarch · tumbleweed

      Unknown · Fixed: 1.16.2-1.1

      Version impact unknown

      pypi · shadowsocks-rust · opensuse · tumbleweed

  • [shadowsocks-rust]Fixed

    Source package: [shadowsocks-rust]

    Details (1)

    • 1.24.0-4.3 · x86_64 · tumbleweed

      Fixed · Fixed: 1.16.2-1.1

      pypi · shadowsocks-rust · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]