Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:1403-1 low: kubernetes1.24 Security Advisory Updates
* bsc#1222539 Cross-References: * CVE-2024-3177
SUSE: 2024:1163-1 moderate: kubernetes1.23
* bsc#1219964 Cross-References: * CVE-2024-0793
SUSE: 2024:1164-1 moderate: kubernetes1.23
* bsc#1219964 Cross-References: * CVE-2024-0793
SUSE: 2024:1165-1 moderate: kubernetes1.23
* bsc#1062303 * bsc#1219964 Cross-References: * CVE-2024-0793
SUSE: 2024:1166-1 moderate: kubernetes1.23
* bsc#1219964 Cross-References: * CVE-2024-0793
Cilium 1.14 Expands Networking Beyond Kubernetes, Offers Higher Speeds
Cilium , an open-source networking, security and observability project, has released version 1.14 with an array of connectivity, security and observability upd…
Fedora 38: kubernetes 2023-c7f63322b5
Upstream security update with additional bugfixes. Resolves CVE-2023-2431.
Fedora 35: kubernetes 2022-2004702d98
Resolves, in part, #2142161. Security patches that resolve CVE-2022-3162 and CVE-2022-3294.
Google Debugs, JFrog Jumps Code, Confidential Kubernetes, Meta-PyTorch
As the open-source model continues to prove its sustainability in the enterprise, the software community is ramping up its security-mindedness. That concern wa…
Fedora 36: golang-k8s-code-generator 2022-37aef44d1e
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lr…
Fedora 36: golang-k8s-kube-aggregator 2022-37aef44d1e
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lr…
Fedora 36: golang-k8s-kube-openapi 2022-37aef44d1e
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lr…
Fedora 36: golang-k8s-pod-security-admission 2022-fae3ecee19
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). --…
Security: Google to pay up to $91,337 for exploits of new Linux and Kubernetes bu
Google raises rewards for its kCTF exploit-focussed vulnerability bounty focussing on Linux kernel zero-day flaws. And changes some rules.
SUSE: 2019:2655-1 important: kubernetes-salt
An update that contains security fixes can now be installed.
SUSE: 2019:2617-1 moderate: kubernetes, patchinfo
An update that fixes two vulnerabilities is now available.
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernet…
HTTP/2 Bomb: Why Linux Infrastructure is Vulnerable to a New Low-Bandwidth DoS Attack
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the software that sits at the front of much of the Linux internet…
Compromised VS Code Extension Puts Linux Development Pipelines at Risk
The compromise of Nx Console shows how much infrastructure now sits behind a single developer account. GitHub repositories, CI/CD pipelines, container build sy…
Container Security Misconfigurations That Still Go Unnoticed
Container security has long carried a reputation for resilience, but attackers have increasingly shifted their focus toward something easier to exploit: the Ku…
Linux Server Monitoring Challenges and Solutions for Security Teams
Linux shows up in places most people stop noticing. Web servers, Kubernetes nodes, build runners, database backends. Start tracing how modern platforms actuall…
Debian 12 Docker-Important Update for SUSE-SU-2026-0810-7 Patch
# Security update for kubernetes-old Announcement ID: SUSE-SU-2026:0573-1 Release Date: 2026-02-17T18:47:31Z Rating: important References:
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure
Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up malicious infrastr…
Debian 11 containerd Critical Permissions DoS Vuln DLA-4467-1
Multiple vulnerabilities were discovered in containerd, an open-source container runtime, used by e.g. Docker or Kubernetes. CVE-2024-25621 Overly broad defaul…