Vulnerability-Lookup

OPENSUSE-SU-2026:21870-1

Vulnerability from csaf_opensuse - Published: 2026-09-16 20:01 - Updated: 2026-09-17 17:44

Summary

Security update for openai-codex

Severity

Moderate

Notes

Title of the patch: Security update for openai-codex

Description of the patch: This update for openai-codex fixes the following issues: Changes in openai-codex: Update to version 0.154.0: * Experimental worktree support for isolated checkouts of new or forked sessions, with browse and resume * Answer questions inline while Codex keeps working, keeping the main draft * Vim R replace mode with undo and dot-repeat; /copy keeps formatting and covers status and session fields * Plugin tools refresh after external upgrades, MCP OAuth refresh is coordinated, helpers no longer run before trust is established; resume and fork keep saved permissions * Drop the deprecated codex mcp-server entry point, now codex mcp - Regenerate vendor.tar.zst: rmcp 3.1.3 -> 3.2.0 plus routine bumps; webrtc/gstreamer/cpal stay out of the codex-cli link graph, so the License tag is unchanged - Legal-Review-Notice: linked-crate count 876/878 -> 880/882 on aarch64/x86_64; the vendored dependency licence set is unchanged - cargo-audit reports the same five advisories as 0.151.0, none new and none fixable by re-vendoring Update to version 0.153.4: * GPT-6-Astra is listed in the bundled model picker and is the bundled default when no model is configured * Astra's async-question guidance now applies only when request_user_input_async is available in the session Update to version 0.153.3: * GPT-6-Astra is available in the Amazon Bedrock model picker for Mantle and Runtime global/US routes * Astra's async-question guidance now names request_user_input_async and notes that it accepts text only - Keep vendor.tar.zst: 0.153.4 has the same Cargo.lock as 0.153.2, so the linked crate set, the License tag and the Legal-Review-Notice counts are unchanged - Update to version 0.153.2: * Correct the GPT-6-Astra Fast tier description to "2x speed" instead of "1.5x"; display text only, request handling is unchanged - Update to version 0.153.1: * GPT-6-Astra can be configured through the API without changing the default model or listing it in the model picker - Build against the system bzip2, libzstd, oniguruma and sqlite instead of the copies bzip2-sys, zstd-sys, onig_sys and libsqlite3-sys otherwise compile in; drop their bundled() Provides and add pkgconfig(bzip2), pkgconfig(libzstd), pkgconfig(oniguruma) >= 6.9.3 and pkgconfig(sqlite3) >= 3.34.1 * oniguruma and sqlite have no usable manifest switch, so %build and %check export RUSTONIG_SYSTEM_LIBONIG and LIBSQLITE3_SYS_USE_PKG_CONFIG instead, and %install now fails the build unless all four are DT_NEEDED of codex * aws-lc stays bundled: aws-lc-sys has no system-library mode - Keep vendor.tar.zst: 0.153.2 has the same Cargo.lock as 0.153.0, so the linked crate set, the License tag and the Legal-Review-Notice counts are unchanged - Update to version 0.153.0: * Vim mode gains undo (u) and redo (Ctrl+R), preserving whole drafts including pasted content and attachments * The plugin CLI lists, installs and removes plugins from remote marketplaces * tui.auto_recap = false turns off automatic recaps while keeping /recap available * TUI history shows complete patches, input sent to background terminals and individual completed commands * TUI sessions reconnect after an app-server connection drops, keeping drafts and holding queued submissions for review * Guardian review history survives compaction, restarts and forks; Full Access skips Guardian review for confirmation-only actions * Remembered MCP tool approvals are scoped to the selected app account * tui.disable_paste_burst replaces the top-level setting, which stays supported as a fallback * New disabled-by-default features.context_management.experimental_mode - Regenerate vendor.tar.zst: the 14 crates 0.153.0 adds to the lockfile are all Windows-only, so the linked third-party set, the License tag and the bundled() versions are unchanged; the Legal-Review-Notice counts move only by one added first-party workspace member - Update to version 0.152.1: * Guardian approval review honours Node REPL policies supplied through model metadata; the bundled policy is now only the fallback * Switching models mid-session is refused when the destination changes the Guardian parent-fallback node REPL policy - Update to version 0.152.0: * Vim mode gains "/" and "?" search within drafts, with match highlighting and n/N repeat navigation * Rate-limit banners offer actions for checking usage, managing credits, resetting limits and managing plans * TUI and "codex exec" show credential-refresh progress, including Amazon Bedrock reauthentication * MCP server names may contain ":", "@", "/" and "." * Individual MCP tools honour an output_token_limit setting * App-server clients can configure thread/shellCommand timeouts longer than one hour * Cloud task requests reject untrusted backend URLs and refuse redirects, protecting saved credentials * The planning tool is now disabled by default; re-enable with tools.update_plan.enabled = true * Vim-enabled composers start fresh drafts in Insert mode again - cargo-audit reports five advisories on the vendored lockfile, all pre-existing and unchanged since 0.151.0; audit a bare Cargo.lock because upstream's codex-rs/.cargo/audit.toml hides four of them: * CVE-2026-25800 (RUSTSEC-2026-0185, quinn-proto 0.11.14): not affected, reqwest gates dep:quinn behind its "http3" feature, which the workspace leaves off, so it is never linked * RUSTSEC-2026-0194 and -0195 (quick-xml 0.39.4) and RUSTSEC-2026-0118 and -0119 (hickory-proto 0.25.2), DoS with no CVE assigned: linked, but each fix is a semver-incompatible bump of an intermediate crate, or not released at all - Legal-Review-Notice: linked-crate count 874/876 -> 875/877 on aarch64/x86_64, from one new first-party workspace crate (codex-guardian-context). The vendored dependency set, the bundled() versions and the License tag are unchanged from 0.151.0 - Update to version 0.151.0: * Configurable grace period for discovering tools from optional MCP servers * Extensions can inspect or replace MCP tool results before they reach the model * Plugin catalogs combine per-repository configuration and report invalid project marketplaces without hiding valid plugins * Preserve restored permission profiles across TUI turns; /cd can no longer weaken sandbox restrictions * Stale Guardian classifications no longer authorize actions after a permission-state change * Remote sandbox enforcement uses the executor's actual home directory, OS and path conventions * Keep tool availability and reasoning effort correct when switching models or falling back to another one * Nested subagent token usage counts toward root goal budgets - Vendored dependency set is unchanged from 0.150.1 (1193 crates, none added or removed), so the License tally and the bundled() versions still hold.

Patchnames: openSUSE-Leap-16.0-packagehub-602

CVE-2026-25800

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 5 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch	—	Vendor Fix

Threats

Impact moderate

References

6 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://bugzilla.suse.com/1273366	self
https://www.suse.com/security/cve/CVE-2026-25800/	self
https://www.suse.com/security/cve/CVE-2026-25800	external
https://bugzilla.suse.com/1273366	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openai-codex",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openai-codex fixes the following issues:\n\nChanges in openai-codex:\n\nUpdate to version 0.154.0:\n\n  * Experimental worktree support for isolated checkouts of new\n    or forked sessions, with browse and resume\n  * Answer questions inline while Codex keeps working, keeping\n    the main draft\n  * Vim R replace mode with undo and dot-repeat; /copy keeps\n    formatting and covers status and session fields\n  * Plugin tools refresh after external upgrades, MCP OAuth\n    refresh is coordinated, helpers no longer run before trust\n    is established; resume and fork keep saved permissions\n  * Drop the deprecated codex mcp-server entry point, now codex mcp\n- Regenerate vendor.tar.zst: rmcp 3.1.3 -\u003e 3.2.0 plus routine\n  bumps; webrtc/gstreamer/cpal stay out of the codex-cli link\n  graph, so the License tag is unchanged\n- Legal-Review-Notice: linked-crate count 876/878 -\u003e 880/882 on\n  aarch64/x86_64; the vendored dependency licence set is unchanged\n- cargo-audit reports the same five advisories as 0.151.0, none\n  new and none fixable by re-vendoring\n\nUpdate to version 0.153.4:\n\n  * GPT-6-Astra is listed in the bundled model picker and is the\n    bundled default when no model is configured\n  * Astra\u0027s async-question guidance now applies only when\n    request_user_input_async is available in the session\n\nUpdate to version 0.153.3:\n\n  * GPT-6-Astra is available in the Amazon Bedrock model picker\n    for Mantle and Runtime global/US routes\n  * Astra\u0027s async-question guidance now names\n    request_user_input_async and notes that it accepts text only\n\n- Keep vendor.tar.zst: 0.153.4 has the same Cargo.lock as 0.153.2,\n  so the linked crate set, the License tag and the\n  Legal-Review-Notice counts are unchanged\n\n- Update to version 0.153.2:\n\n  * Correct the GPT-6-Astra Fast tier description to \"2x speed\"\n    instead of \"1.5x\"; display text only, request handling is\n    unchanged\n    \n- Update to version 0.153.1:\n\n  * GPT-6-Astra can be configured through the API without changing\n    the default model or listing it in the model picker\n    \n- Build against the system bzip2, libzstd, oniguruma and sqlite\n  instead of the copies bzip2-sys, zstd-sys, onig_sys and\n  libsqlite3-sys otherwise compile in; drop their bundled()\n  Provides and add pkgconfig(bzip2), pkgconfig(libzstd),\n  pkgconfig(oniguruma) \u003e= 6.9.3 and pkgconfig(sqlite3) \u003e= 3.34.1\n  * oniguruma and sqlite have no usable manifest switch, so %build\n    and %check export RUSTONIG_SYSTEM_LIBONIG and\n    LIBSQLITE3_SYS_USE_PKG_CONFIG instead, and %install now fails\n    the build unless all four are DT_NEEDED of codex\n  * aws-lc stays bundled: aws-lc-sys has no system-library mode\n  \n- Keep vendor.tar.zst: 0.153.2 has the same Cargo.lock as 0.153.0,\n  so the linked crate set, the License tag and the\n  Legal-Review-Notice counts are unchanged\n\n- Update to version 0.153.0:\n\n  * Vim mode gains undo (u) and redo (Ctrl+R), preserving whole\n    drafts including pasted content and attachments\n  * The plugin CLI lists, installs and removes plugins from remote\n    marketplaces\n  * tui.auto_recap = false turns off automatic recaps while keeping\n    /recap available\n  * TUI history shows complete patches, input sent to background\n    terminals and individual completed commands\n  * TUI sessions reconnect after an app-server connection drops,\n    keeping drafts and holding queued submissions for review\n  * Guardian review history survives compaction, restarts and\n    forks; Full Access skips Guardian review for confirmation-only\n    actions\n  * Remembered MCP tool approvals are scoped to the selected\n    app account\n  * tui.disable_paste_burst replaces the top-level setting, which\n    stays supported as a fallback\n  * New disabled-by-default\n    features.context_management.experimental_mode\n    \n- Regenerate vendor.tar.zst: the 14 crates 0.153.0 adds to the\n  lockfile are all Windows-only, so the linked third-party set,\n  the License tag and the bundled() versions are unchanged; the\n  Legal-Review-Notice counts move only by one added first-party\n  workspace member\n\n- Update to version 0.152.1:\n\n  * Guardian approval review honours Node REPL policies supplied\n    through model metadata; the bundled policy is now only the\n    fallback\n  * Switching models mid-session is refused when the destination\n    changes the Guardian parent-fallback node REPL policy\n\n- Update to version 0.152.0:\n\n  * Vim mode gains \"/\" and \"?\" search within drafts, with match\n    highlighting and n/N repeat navigation\n  * Rate-limit banners offer actions for checking usage, managing\n    credits, resetting limits and managing plans\n  * TUI and \"codex exec\" show credential-refresh progress,\n    including Amazon Bedrock reauthentication\n  * MCP server names may contain \":\", \"@\", \"/\" and \".\"\n  * Individual MCP tools honour an output_token_limit setting\n  * App-server clients can configure thread/shellCommand timeouts\n    longer than one hour\n  * Cloud task requests reject untrusted backend URLs and refuse\n    redirects, protecting saved credentials\n  * The planning tool is now disabled by default; re-enable with\n    tools.update_plan.enabled = true\n  * Vim-enabled composers start fresh drafts in Insert mode again\n  \n- cargo-audit reports five advisories on the vendored lockfile, all\n  pre-existing and unchanged since 0.151.0; audit a bare Cargo.lock\n  because upstream\u0027s codex-rs/.cargo/audit.toml hides four of them:\n  \n  * CVE-2026-25800 (RUSTSEC-2026-0185, quinn-proto 0.11.14): not\n    affected, reqwest gates dep:quinn behind its \"http3\" feature,\n    which the workspace leaves off, so it is never linked\n  * RUSTSEC-2026-0194 and -0195 (quick-xml 0.39.4) and\n    RUSTSEC-2026-0118 and -0119 (hickory-proto 0.25.2), DoS with no\n    CVE assigned: linked, but each fix is a semver-incompatible\n    bump of an intermediate crate, or not released at all\n    \n- Legal-Review-Notice: linked-crate count 874/876 -\u003e 875/877 on\n  aarch64/x86_64, from one new first-party workspace crate\n  (codex-guardian-context). The vendored dependency set, the\n  bundled() versions and the License tag are unchanged from 0.151.0\n\n- Update to version 0.151.0:\n\n  * Configurable grace period for discovering tools from optional\n    MCP servers\n  * Extensions can inspect or replace MCP tool results before they\n    reach the model\n  * Plugin catalogs combine per-repository configuration and report\n    invalid project marketplaces without hiding valid plugins\n  * Preserve restored permission profiles across TUI turns; /cd can\n    no longer weaken sandbox restrictions\n  * Stale Guardian classifications no longer authorize actions after\n    a permission-state change\n  * Remote sandbox enforcement uses the executor\u0027s actual home\n    directory, OS and path conventions\n  * Keep tool availability and reasoning effort correct when\n    switching models or falling back to another one\n  * Nested subagent token usage counts toward root goal budgets\n  \n- Vendored dependency set is unchanged from 0.150.1 (1193 crates,\n  none added or removed), so the License tally and the bundled()\n  versions still hold.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-602",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21870-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273366",
        "url": "https://bugzilla.suse.com/1273366"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25800 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25800/"
      }
    ],
    "title": "Security update for openai-codex",
    "tracking": {
      "current_release_date": "2026-09-17T17:44:54Z",
      "generator": {
        "date": "2026-09-16T20:01:13Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21870-1",
      "initial_release_date": "2026-09-16T20:01:13Z",
      "revision_history": [
        {
          "date": "2026-09-16T20:01:13Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-17T17:44:54Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openai-codex-0:0.154.0-bp160.1.1.aarch64",
                "product": {
                  "name": "openai-codex-0:0.154.0-bp160.1.1.aarch64",
                  "product_id": "openai-codex-0:0.154.0-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openai-codex@0.154.0-bp160.1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch",
                "product": {
                  "name": "openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch",
                  "product_id": "openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openai-codex-bash-completion@0.154.0-bp160.1.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch",
                "product": {
                  "name": "openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch",
                  "product_id": "openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openai-codex-fish-completion@0.154.0-bp160.1.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch",
                "product": {
                  "name": "openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch",
                  "product_id": "openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openai-codex-zsh-completion@0.154.0-bp160.1.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openai-codex-0:0.154.0-bp160.1.1.x86_64",
                "product": {
                  "name": "openai-codex-0:0.154.0-bp160.1.1.x86_64",
                  "product_id": "openai-codex-0:0.154.0-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openai-codex@0.154.0-bp160.1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openai-codex-0:0.154.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.aarch64"
        },
        "product_reference": "openai-codex-0:0.154.0-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openai-codex-0:0.154.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.x86_64"
        },
        "product_reference": "openai-codex-0:0.154.0-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch"
        },
        "product_reference": "openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch"
        },
        "product_reference": "openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch"
        },
        "product_reference": "openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-25800",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25800"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch",
          "openSUSE Leap 16.0:openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch",
          "openSUSE Leap 16.0:openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25800",
          "url": "https://www.suse.com/security/cve/CVE-2026-25800"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273366 for CVE-2026-25800",
          "url": "https://bugzilla.suse.com/1273366"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch",
            "openSUSE Leap 16.0:openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch",
            "openSUSE Leap 16.0:openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:openai-codex-0:0.154.0-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:openai-codex-bash-completion-0:0.154.0-bp160.1.1.noarch",
            "openSUSE Leap 16.0:openai-codex-fish-completion-0:0.154.0-bp160.1.1.noarch",
            "openSUSE Leap 16.0:openai-codex-zsh-completion-0:0.154.0-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T20:01:13Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-25800"
    }
  ]
}

CVE-2026-25800 (GCVE-0-2026-25800)

Vulnerability from cvelistv5 – Published: 2026-07-23 19:09 – Updated: 2026-07-23 19:37

Title

quinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly

Summary

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 19:36 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/quinn-rs/quinn/security/adviso…	x_refsource_CONFIRM
https://github.com/quinn-rs/quinn/pull/2694	x_refsource_MISC
https://rustsec.org/advisories/RUSTSEC-2026-0185.html	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
quinn-rs	quinn	Affected: >= 0.1.0, < 0.11.15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25800",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T19:36:43.190990Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T19:37:11.300Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "quinn",
          "vendor": "quinn-rs",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 0.1.0, \u003c 0.11.15"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T19:09:19.159Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j"
        },
        {
          "name": "https://github.com/quinn-rs/quinn/pull/2694",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/quinn-rs/quinn/pull/2694"
        },
        {
          "name": "https://rustsec.org/advisories/RUSTSEC-2026-0185.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://rustsec.org/advisories/RUSTSEC-2026-0185.html"
        }
      ],
      "source": {
        "advisory": "GHSA-p2f3-wfhq-fj93",
        "discovery": "UNKNOWN"
      },
      "title": "quinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-25800",
    "datePublished": "2026-07-23T19:09:19.159Z",
    "dateReserved": "2026-02-05T19:58:01.641Z",
    "dateUpdated": "2026-07-23T19:37:11.300Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:21870-1

CVE-2026-25800 (GCVE-0-2026-25800)

Tags

Sightings

Nomenclature

Related by attack behaviour