Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2019:1368-2 important: Recommended sles12sp3-docker-image, sles12sp4-image, system-user-root
An update that fixes one vulnerability is now available.
CRI-O Restore Flaw Can Bypass Kubernetes Security Policies
Kubernetes groups one or more containers into a pod, the basic unit it deploys.
Red Hat Quay Build Workflow Could Expose Registry Credentials
As of September 17, Red Hat had documented a flaw in a Red Hat Quay build workflow that could expose container registry credentials to code retrieved from a mu…
SUSE kubevirt Important Security Issues Resolved 2026-3630-1
SUSE released a security update for kubevirt and related containers, addressing 16 vulnerabilities including risks of denial of service and privilege escalatio…
Ubuntu 16.04 Linux Kernel Important Privilege Escalation Issues USN-8530-2
Ubuntu 16.04 LTS received security updates for the linux-aws-hwe kernel to correct several vulnerabilities that could allow local attackers to escalate privile…
Ubuntu 16.04 LTS Kernel Important Flaw Escalation CVE-2026-43503
Ubuntu Security Notice USN-8529-2 reveals multiple vulnerability fixes in the Linux kernel affecting Ubuntu 16.04 LTS, with local attackers potentially escalat…
Fedora 44 fuse-overlayfs Important SUID/SGID Escalation Fix 2026-4e0490640f
Fedora has released an update for fuse-overlayfs to version 1.17, addressing a privilege escalation vulnerability related to SUID/SGID bit preservation on file…
ENCFORGE Ransomware Targets AI Models After Langflow RCE Exploit
An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known Langflow RCE and pivoting via an …
Fedora 43 moby-engine Update v29.6.2 Denial of Service Vulnerability
An update for the moby-engine in Fedora 43 has been released, addressing upstream security vulnerabilities and introducing version 29.6.2, making Docker contai…
Mak’s Weekly Security Roundup: Linux Updates You Shouldn't Ignore This Week
Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not eve…
Debian Incus Critical Bypass Command Exec Vulnerability DSA-6370-1
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in a bypass of security restrictions or t…
PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any art…
Debian LXD Critical Issues Denial of Service CVE-2026-40197 DSA-6247-1
Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in denial of service. For the oldstable dis…
Debian Trixie DSA-6184-1 Incus Important Denial of Service CVE-2026-28384
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in denial of service or the execution of …
Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets
Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, was compromised a second time within the span of a month to deliver malware cap…
Alpine Linux 3 RLSB-2026-5783 Key Vulnerability Resolutions Now Released
Important: container-tools:rhel8 security update
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure
Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up malicious infrastr…
Debian 11 containerd Critical Permissions DoS Vuln DLA-4467-1
Multiple vulnerabilities were discovered in containerd, an open-source container runtime, used by e.g. Docker or Kubernetes. CVE-2024-25621 Overly broad defaul…
Debian: Critical Denial of Service & Privilege Escalation DSA-6067-1
Two security vulnerabilities were discovered in the Containerd container runtime, which may result in denial of service or local privilege escalation. For the …
Debian DSA-6057-1 LXD Important Local Privilege Escalation CVE-2025-64507
It was discovered that LXD, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability if unprivileged users are al…
Debian: Incus Important Privilege Escalation CVE-2025-64507 DSA-6051-1
It was discovered that Incus, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability unprivileged users are all…
TARmageddon: async-tar Vulnerability Exposes Linux Archive Extraction Risks
A path traversal flaw in the Rust async-tar library has people looking harder at archive extraction security on Linux. Researchers are calling it TARmageddon, …
Fedora 41: toolbox Critical Fixes for CVE-2025-23266, GHSA-fv92-fjc5-jj9h
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Fedora 42: toolbox Security Updates for CVE-2025-23266 CVE-2025-23267
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…