coder / coder/code-server

Security Vulnerability Patch Required - CVE-2025-15467

Open
#7,658 0 comments 0 reactions 0 assignees View on GitHub
enhancement high-priority security
Dominant language
TypeScript
Stars
79.3k
Forks
6.8k
Avg merge
2d 6h
Merged PRs (30d)
41

Description

Image

# 🔒 Security Vulnerability Patch Required - CVE-2025-15467

## 📋 Summary
A **Critical** severity security vulnerability (CVE-2025-15467) has been discovered in `libssl3` and `openssl` packages. Immediate patching is required.

## 🚨 Vulnerability Details
- **CVE ID**: CVE-2025-15467
- **Severity**: 🔴 Critical
- **Affected Packages**:
- `libssl3` (redhat 9.8)
- `openssl` (redhat 9.8)

## 📦 Current vs Fixed Versions

| Package | Current Version | Fixed Version | Status |
|---------|----------------|---------------|--------|
| libssl3 | 3.0.18-1-deb12u1 | 3.0.18-1-deb12u2 | ⚠️ Outdated |
| openssl | 3.0.18-1-deb12u1 | 3.0.18-1-deb12u2 | ⚠️ Outdated |

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.