Important: rclone

Issue Overview: The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback,...

openSUSE 16 Security Update : cloudflared (openSUSE-SU-2026:21924-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21924-1 advisory. Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge...

CLEANSTART-2026-YH11240 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

OPENSUSE-SU-2026:21924-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge registration errors over QUIC and fix supervisor error classification Negotiate protected mode durin...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0335-1 Rating: important References: 1258543 1276745 1278002 1278624 1278702 1279390 1279392 1279395 1280111 Cross-References: CVE-2026-24122 CVE-2026-37236 CVE-2026-41178 CVE-2026-50163 CVE-2026-53495...

CLEANSTART-2026-GH46550 Security fixes in fulcio 1.8.8-r2

Package fulcio version 1.8.8-r2 fixes 3 vulnerabilities: CVE-2026-33186, ghsa-hrxh-6v49-42gf, CVE-2026-56854...

BELL-CVE-2026-56854

Bulletin has no description...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: kubescape, chisel, skaffold-fips, crossplane-cli-fips, external-dns, kubevela-fips, snyk-cli, cg, kubescape-server-fips, sftpgo, containerd, crossplane-cli, beats, kubernetes-dashboard, zitadel, rancher, frankenphp-8.3, kaf, minio-fips, cilium,...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: skaffold, kubevela, argocd-image-updater, kaf, prometheus-operator, cert-manager, containerd, falco-no-driver, gitea, kyverno, sftpgo, gitness, kubernetes-dashboard, cilium, opentelemetry-collector, fscrypt, minio, k3s, flux-image-automation-controller, external-dns,...

CVE-2026-56854

creationtimestamp| type| source ---|---|--- 2026-08-29 12:43:08+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mu7vonc6cz25 2026-08-31 02:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mudsqcsjcw26 2026-08-31 02:22:27+00:00| seen|...

DEBIAN-CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...

UBUNTU-CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...