CLEANSTART-2026-GH46550 Security fixes in fulcio 1.8.8-r2

Package fulcio version 1.8.8-r2 fixes 3 vulnerabilities: CVE-2026-33186, ghsa-hrxh-6v49-42gf, CVE-2026-56854...

BELL-CVE-2026-56854

Bulletin has no description...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, rancher-agent, gitness, aactl, frankenphp-8.2, flux-image-automation-controller-fips, telegraf, kaf, drone, tigera-operator, cert-manager, argocd-image-updater-fips, prometheus-operator, chisel, rancher, omnictl-multiarch, kubernetes-dashboard,...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: snyk-cli, helm, flux-notification-controller, containerd, falco-no-driver, kubernetes-dashboard, skaffold, aactl, gitea, kine, rancher-agent, flux, kyverno, cilium, fscrypt, external-dns, opentelemetry-collector, rclone, kubernetes, k3s, kubevela, k9s, kubescape,...

CVE-2026-56854

creationtimestamp| type| source ---|---|--- 2026-08-29 12:43:08+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mu7vonc6cz25 2026-08-31 02:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mudsqcsjcw26 2026-08-31 02:22:27+00:00| seen|...

DEBIAN-CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...

UBUNTU-CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...