Commit 17f45745ef

17f45745efe67a565064b737d1d773cdb72f4052

parent: dfc6dd0641

Verified · cmc ci/build: success ci/test: success ci/vuln: success

cmc <hello@cleberg.net> · 2026-09-02 23:49 UTC

Bump golang.org/x/crypto to v0.56.0

govulncheck: GO-2026-6354 GO-2026-6355 both in the ssh package, both reached through
ssh.NewServerConn in the embedded SSH server. One is a denial of service
on a deadlocked undecided channel. Fixed in v0.56.0.

Layout: unified · split

go.mod +1 −1
@@ -12,7 +12,7 @@ require (
1212 github.com/yuin/goldmark v1.8.5
1313 github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc
1414 go.yaml.in/yaml/v3 v3.0.5
15 golang.org/x/crypto v0.55.0
15 golang.org/x/crypto v0.56.0
1616 golang.org/x/image v0.45.0
1717 golang.org/x/net v0.58.0
1818 golang.org/x/term v0.45.0
go.sum +2 −2
@@ -64,8 +64,8 @@ github.com/yuin/goldmark-highlighting/v2 v2.0.0-20230729083705-37449abec8cc/go.m
6464go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
6565go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
6666go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
67golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=
68golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis=
67golang.org/x/crypto v0.56.0 h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y=
68golang.org/x/crypto v0.56.0/go.mod h1:OMW5y6CY9l38uPLmxU6l6pwcXp1obtLo3e6gT7gQR2I=
6969golang.org/x/image v0.45.0 h1:FMb1nTbH5H9vF55SriQHgFw5GnNL9Jg6L25BwXKzhB0=
7070golang.org/x/image v0.45.0/go.mod h1:n62x/7RqlwXDvGsSU4u6IUTUf6KghUZ9Bt7cG/T9Fx4=
7171golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk=