Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

openSUSE: Moderate Patch for CVE-2025-22872 via go-sendxmpp Update

opensuse
Calendar Grey August 30, 2025
Dist Opensuse Esm H88
The recent openSUSE update introduces a significant security enhancement for go-sendxmpp, tackling CVE-2025-22872 while also enhancing current functionalities.
An update that fixes one vulnerability is now available

Description

This update for go-sendxmpp fixes the following issues:

- Update to 0.15.0: Added:

* Add flag --verbose to show debug information.

* Add flag --recipients to specify recipients by file.

* Add flag --retry-connect to try after a waiting time if the connection

fails.

* Add flag --retry-connect-max to specify the amount of retry attempts.

* Add flag --legacy-pgp for using XEP-0027 PGP encryption with Ox keys.

* Add support for punycode domains. Changed:

* Update gopenpgp library to v3.

* Improve error detection for MUC joins.

* Don't try to connect to other SRV record targets if error contains

'auth-failure'.

* Remove support for old SSDP version (via go-xmpp v0.2.15).

* Http-upload: Stop checking other disco items after finding upload

component.

* Increase default TLS version to 1.3.

- CVE-2025-22872: Fixed golang.org/x/net/html: incorrectly interpreted

tags can cause content to be placed...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP7:

zypper in -t patch openSUSE-2025-332=1

Package List

- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64):

go-sendxmpp-0.15.0-bp157.2.3.1

References

https://www.suse.com/security/cve/CVE-2025-22872.html

https://bugzilla.suse.com/1241814

Announcement ID: openSUSE-SU-2025:0332-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP7 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here