f-denkena/rclone
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

build: update golang.org/x/crypto to v0.56.0 to fix CVE-2026-78662 and CVE-2026-56855

Browse Source 
CVE-2026-78662: a malicious peer could flood an undecided channel's
incoming requests, deadlocking the whole connection in
golang.org/x/crypto/ssh (GO-2026-6354)

CVE-2026-56855: a malicious peer could send crafted messages on an
established channel, deadlocking the whole connection in
golang.org/x/crypto/ssh (GO-2026-6355)
This commit is contained in:
Nick Craig-Wood
2026-09-03 10:45:32 +01:00
parent 7e17e1b90d
commit f550317590
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
go.mod
+1 -1
View File
@@ -95,7 +95,7 @@ require (
github.com/zeebo/xxh3 v1.1.0
go.etcd.io/bbolt v1.5.0
goftp.io/server/v2 v2.0.3
golang.org/x/crypto v0.55.0
golang.org/x/crypto v0.56.0
golang.org/x/net v0.57.0
golang.org/x/oauth2 v0.36.0
golang.org/x/sync v0.22.0