ROOT-APP-GOBINARY-CVE-2026-78662 CVE-2026-78662 in golang.org/x/crypto - Patched by Root

Root has patched CVE-2026-78662 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...

openSUSE 16 Security Update : cloudflared (openSUSE-SU-2026:21924-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21924-1 advisory. Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge...

Fedora 44 : lego (2026-578a96e5f5)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-578a96e5f5 advisory. Update to 5.5.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 45 : lego (2026-9eaee019b6)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9eaee019b6 advisory. Update to 5.5.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

OPENSUSE-SU-2026:21924-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge registration errors over QUIC and fix supervisor error classification Negotiate protected mode durin...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0335-1 Rating: important References: 1258543 1276745 1278002 1278624 1278702 1279390 1279392 1279395 1280111 Cross-References: CVE-2026-24122 CVE-2026-37236 CVE-2026-41178 CVE-2026-50163 CVE-2026-53495...

Fedora 45 : opkssh (2026-559bbb39f5)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-559bbb39f5 advisory. Update the bundled golang.org/x/crypto to v0.56.0, which fixes CVE-2026-56855 and CVE-2026-78662 denial of service via crafted channel messages in...

Fedora 46 : rootlesskit (2026-ec725c24c1)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ec725c24c1 advisory. Automatic update for rootlesskit-3.2.0-1.fc46. Changelog Sun Sep 20 2026 Bradley G Smith - 3.2.0-1 - Update to release v3.2.0 - Resolves: rhbz253087...

CLEANSTART-2026-CS12925 Security fix for CVE-2026-78662 applied in: atlantis 0.47.1-r1, boring-registry 0.18.0-r1, cadvisor 0.55.1-r7, cadvisor 0.56.2-r4, cadvisor 0.57.0-r6, cadvisor 0.60.5-r2, cert-manager 1.18.6-r6, cert-manager 1.19.6-r4, cert-manager 1.20.3-r5, cert-manager 1.21.1-r1, cosign 2.6.5-r3, dex 2.42.1-r4, dex 2.43.1-r3, dex 2.44.0-r8, dex 2.45.1-r7, dynatrace-operator 1.10.2-r1, dynatrace-operator 1.7.3-r5, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, git-lfs 3.7.1-r3, gitea 1.27.2-r2, haproxy-ingress 0.13.19-r4, haproxy-ingress 0.14.12-r5, haproxy-ingress 0.15.4-r7, haproxy-ingress 0.16.1-r7, helm 3.21.4-r2, helm 4.2.4-r2, keda 2.20.2-r2, knative-serving 1.21.3-r4, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kube-vip-fips 1.2.3-r1, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, minio-client 0.20250721.052808-r1, minio-operator 6.0.4-r8, minio-operator 7.0.1-r8, minio-operator 7.1.1-r8, nats-streaming 0.25.6-r7, opa 1.20.2-r2, opentelemetry-collector-contrib 0.157.0-r1, prometheus-alertmanager 0.34.0-r2, prometheus-mysqld-exporter 0.17.2-r6, prometheus-mysqld-exporter 0.18.0-r6, prometheus-mysqld-exporter 0.19.0-r5, prometheus-mysqld-exporter 0.20.0-r0, prometheus-node-exporter 1.10.2-r5, prometheus-node-exporter 1.11.1-r4, prometheus-node-exporter 1.12.1-r2, prometheus-node-exporter 1.9.1-r5, prometheus-node-exporter-fips 1.11.1-r3, prometheus-operator 0.90.1-r4, prometheus-operator 0.91.0-r5, prometheus-operator 0.92.1-r3, prometheus-redis-exporter 1.87.0-r2, prometheus-redis-exporter 1.88.0-r3, prometheus-statsd-exporter 0.28.0-r4, prometheus-statsd-exporter 0.29.0-r1, prometheus-statsd-exporter 0.30.0-r0, rclone 1.72.1-r13, rclone 1.73.5-r7, rclone 1.74.4-r2, restic 0.18.1-r8, restic-fips 0.18.1-r7, sealed-secrets 0.36.6-r5, sealed-secrets 0.37.0-r3, sealed-secrets 0.38.4-r1, step 0.27.5-r5, step 0.28.7-r6, step 0.29.0-r5, step-issuer 0.10.2-r6, step-issuer 0.9.11-r4, terraform 1.16.0-r1, tigera-operator 1.42.1-r4, trust-manager 0.21.1-r3, trust-manager 0.22.1-r4, trust-manager 0.23.0-r2, trust-manager 0.24.0-r2, vault 1.19.5-r4, vault 1.20.4-r11, vault 1.21.4-r11, vault 2.0.4-r3, vault-k8s 1.4.2-r3, velero 1.15.2-r9, velero 1.17.2-r9, velero 1.18.2-r8, velero-fips 1.18.2-r7, victoriametrics-operator 0.71.0-r3, victoriametrics-operator 0.73.1-r1, victoriametrics-operator-fips 0.71.0-r1

CVE-2026-78662 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-78662

creationtimestamp| type| source ---|---|--- 2026-09-09 22:34:08+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778 2026-09-10 00:01:53+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778...