Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
# Security update for docker Announcement ID: SUSE-SU-2026:4956-1 Release Date: 2026-10-30T16:24:44Z Rating: important References:
Important: container-tools:rhel8 security, bug fix, and enhancement update
# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:4902-1 Release Date: 2026-10-24T19:35:37Z Rating: important References:
# Security update for docker Announcement ID: SUSE-SU-2026:4822-1 Release Date: 2026-10-21T11:17:43Z Rating: important References:
# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:4675-1 Release Date: 2026-10-14T14:29:00Z Rating: important References:
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed…
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal …
A Linux GPU security fix changes how AMD’s Kernel Fusion Driver (KFD) tracks shared mappings when several containers use one device.
container-tools:rhel8 security and bug fix update
Privilege escalation in a container does not always begin with a new exploit.
Linux containers can be paused, checkpointed, and rebuilt later with CRIU.
A container normally starts under the security rules of the system receiving it.
The crun container runtime has changed how GPU-enabled workloads launch a key graphics helper.
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere e…
Docker has fixed a high-severity Docker Sandboxes vulnerability that allowed a malicious guest to redirect a host-side relay toward Unix sockets outside its au…
Container security can fail before a workload fully enters its root filesystem, the private file tree the container is meant to see.
A flaw in Kata Containers weakened container security in some Confidential Containers deployments. It allowed a malicious host operator to make the protected g…
SUSE announces a critical update for Docker, addressing security issues by rebuilding it against the latest Go security release, applicable to various SUSE Lin…
An update for kubevirt1.9-container-disk on openSUSE Tumbleweed addresses 10 security vulnerabilities, improving system security with various package installat…
Debian issued a security advisory for docker.io addressing multiple vulnerabilities that could lead to privilege escalation and unauthorized file access, urgin…
Public exploit code is now available for SCTPhantom, a Linux kernel flaw that researchers used to escape an unprivileged container and take control of the unde…
A security update for openSUSE Tumbleweed addresses three vulnerabilities in kubevirt1.8-container-disk-1.8.4-3.1, enhancing system protection against identifi…
If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability—CVE-2026-20896—sh…
A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the first exploitation attempts 13 days…
