Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
AlmaLinux 8 Container-Tools Important Security Fix CVE-2019-5736
container-tools:rhel8 security and bug fix update
How Container Restore Can Reopen Privilege Escalation Paths
Privilege escalation in a container does not always begin with a new exploit.
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere e…
Docker Sandboxes Flaw Lets a Guest Reach Host Unix Sockets
Docker has fixed a high-severity Docker Sandboxes vulnerability that allowed a malicious guest to redirect a host-side relay toward Unix sockets outside its au…
Kata Containers Flaw Weakens Container Security With Host-Chosen Mounts
A flaw in Kata Containers weakened container security in some Confidential Containers deployments. It allowed a malicious host operator to make the protected g…
openSUSE Kubevirt Container Disk Moderate Security Update 2026-11520-1
An update for kubevirt1.9-container-disk on openSUSE Tumbleweed addresses 10 security vulnerabilities, improving system security with various package installat…
Debian docker.io Important Privilege Escalation File Access Vuln DSA-6443-1
Debian issued a security advisory for docker.io addressing multiple vulnerabilities that could lead to privilege escalation and unauthorized file access, urgin…
Public SCTPhantom Exploit Tests Linux Container Security Defaults
Public exploit code is now available for SCTPhantom, a Linux kernel flaw that researchers used to escape an unprivileged container and take control of the unde…
openSUSE kubevirt1.8-container-disk Moderate Security Update 2026-11392-1
A security update for openSUSE Tumbleweed addresses three vulnerabilities in kubevirt1.8-container-disk-1.8.4-3.1, enhancing system protection against identifi…
Critical Gitea Docker Authentication Bypass: An Open Door to Your Infrastructure
If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability—CVE-2026-20896—sh…
Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896
A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the first exploitation attempts 13 days…
Rocky Linux container-tools Crucial DoS Vulnerability RLSA-2026-33722
Important: container-tools:rhel8 security, bug fix, and enhancement update
SUSE Container - SUSEConnect Critical Patch 2026-2420-1 Released
# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:2420-1 Release Date: 2026-06-16T14:05:08Z Rating: important References:
Gitea Vulnerability Exposes Private Container Images without Authentication
Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote…
Container Security Misconfigurations That Still Go Unnoticed
Container security has long carried a reputation for resilience, but attackers have increasingly shifted their focus toward something easier to exploit: the Ku…
CrackArmor AppArmor Flaws Put Linux Containers and Snap Sandboxes at Risk
Linux administrators rely on AppArmor to contain compromised applications. If a browser, container, or Snap package is exploited, the profile is supposed to li…
Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747
Several security issues were fixed in Docker.
SUSE Linux 15-SP7 Container-SUSEConnect Important Patch 2026-1484-1
# Security update for container-suseconnect Announcement ID: SUSE-SU-2026:1484-1 Release Date: 2026-04-20T13:35:38Z Rating: important References:
Kubernetes Container Security Misconfigurations Leading to Threats
Container security failures rarely come from zero-days. They come from the configuration. Misconfigurations don't trigger alerts. They don456't crash systems. …
Critical Docker AuthZ Bypass Flaw Allows Silent Root Access on Linux Systems
People often think of containers as locked boxes that keep software separate from the rest of the computer. In reality, that safety depends on a chain of digit…
Mageia 9 docker-containerd Important Denial of Service CVE-2025-64329
MGASA-2026-0030 - Updated docker-containerd packages fix security vulnerabilities
SUSE: container-tool Important Security Patch 2025:4390-2
Affected Products: * Containers Module 15-SP6 * Containers Module 15-SP7 * openSUSE Leap 15.6
SUSE: cdi-apiserver-container Moderate Threat Patch 2025:2554-1
* jsc#PED-10545 Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7
What Are Container Escape Vulnerabilities?
For Linux admins and security professionals, containers are often the backbone of modern infrastructure. They're lightweight, portable, and isolate application…