Important: rclone

Issue Overview: The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback,...

openSUSE 16 Security Update : cloudflared (openSUSE-SU-2026:21924-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21924-1 advisory. Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge...

CLEANSTART-2026-YH11240 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

OPENSUSE-SU-2026:21924-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge registration errors over QUIC and fix supervisor error classification Negotiate protected mode durin...

Security update for trivy (important)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2026:0335-1 Rating: important References: 1258543 1276745 1278002 1278624 1278702 1279390 1279392 1279395 1280111 Cross-References: CVE-2026-24122 CVE-2026-37236 CVE-2026-41178 CVE-2026-50163 CVE-2026-53495...

CLEANSTART-2026-GH46550 Security fixes in fulcio 1.8.8-r2

Package fulcio version 1.8.8-r2 fixes 3 vulnerabilities: CVE-2026-33186, ghsa-hrxh-6v49-42gf, CVE-2026-56854...

BELL-CVE-2026-56854

Bulletin has no description...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: prometheus, kubevela-fips, cg, helm, commercial-grafana, kubevela, commercial-kyverno, chisel-fips, gitea, nerdctl, commercial-expanso-edge, kubescape-server, minio-fips, drone, kubernetes-dashboard, drone-fips, coder-fips, frankenphp-8.5, kaf, rancher-agent,...

CVE-2026-56854 vulnerabilities

Vulnerabilities for packages: telegraf, kubescape, aactl, kubernetes-dashboard, prometheus-operator, loki, flux-notification-controller, snyk-cli, rancher-agent, fscrypt, opentelemetry-collector, kubernetes, kyverno, skaffold, kine, k9s, falco-no-driver, chisel, spire-server, kubevela, kaf,...

CVE-2026-56854

creationtimestamp| type| source ---|---|--- 2026-08-29 12:43:08+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mu7vonc6cz25 2026-08-31 02:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mudsqcsjcw26 2026-08-31 02:22:27+00:00| seen|...

DEBIAN-CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...

UBUNTU-CVE-2026-56854

The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback,...