freenode

← digests

Go x/crypto SSH fixes and Jenkins advisories

Security & Cryptography2026-09-03

Security updates landed for widely used Go cryptography libraries and for Jenkins core plus plugins. The day centered on denial-of-service hardening in SSH handling and a broad set of coordinated Jenkins fixes.

Go x/crypto 0.56.0 addresses SSH channel DoS

The Go team released golang.org/x/crypto v0.56.0 to correct two denial-of-service issues in SSH channel handling. One of the flaws carries CVE-2026-56855. Operators and library consumers who rely on the package for SSH should adopt the update to limit resource exhaustion risks.

Jenkins issues coordinated core and plugin advisories

The Jenkins project published two coordinated security advisories covering vulnerabilities in Jenkins core and more than twenty plugins. The releases address multiple distinct issues across the ecosystem. Teams running Jenkins should review the advisories and apply the corresponding updates to reduce exposure.