CLEANSTART-2026-GH46550 Security fixes in fulcio 1.8.8-r2

Package fulcio version 1.8.8-r2 fixes 3 vulnerabilities: CVE-2026-33186, ghsa-hrxh-6v49-42gf, CVE-2026-56854...

BELL-CVE-2026-56854

Bulletin has no description...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: cilium, minio-fips, opentelemetry-collector-k8s, flux-image-automation-controller, argocd-image-updater-fips, kubescape-server, argocd-image-updater, containerd, kyverno, coder, frankenphp-8.4, kube-state-metrics, cloudbeat, kubernetes, crossplane-cli-fips, prometheu...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: containerd, kubevela, argocd-image-updater, chisel, k9s, nerdctl, aactl, gitea, telegraf, flux-image-automation-controller, cilium, fscrypt, rclone, kubernetes, helm, flux, external-dns, skaffold, gitness, kubescape, flux-source-controller, kubernetes-dashboard,...

CVE-2026-56854

creationtimestamp| type| source ---|---|--- 2026-08-29 12:43:08+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mu7vonc6cz25 2026-08-31 02:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mudsqcsjcw26 2026-08-31 02:22:27+00:00| seen|...

DEBIAN-CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...

UBUNTU-CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...