--- title: October 2026 | daily.dev description: This monthly cloud native roundup covers Kubernetes governance, security incidents and new tooling. Google is donating gVisor to the CNCF as a Sandbox project,... canonical: https://daily.dev/posts/october-2026-onlbuv50f twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: October 2026 | daily.dev og:description: This monthly cloud native roundup covers Kubernetes governance, security incidents and new tooling. Google is donating gVisor to the CNCF as a Sandbox project,... og:url: https://daily.dev/posts/october-2026-onlbuv50f og:image: https://api.daily.dev/og/posts/oNlbuv50F.png og:image:alt: October 2026 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # October 2026 **[CloudNative.Now](https://daily.dev/sources/cloudnative)** · 10 min read · 0 upvotes · 0 comments ## Summary This monthly cloud native roundup covers Kubernetes governance, security incidents and new tooling. Google is donating gVisor to the CNCF as a Sandbox project, with Ant Group, Modal and Tines committing to join as maintainers. A critical Podman flaw (CVE-2026-94603, CVSS 10.0) let checkpoint-annotated images disable sandboxing, patched in 5.8.8 and 6.1.3. Docker Hub disclosed CVE-2026-105445, where account-to-organization conversions could reassign personal access tokens. Kubernetes cgroup v1 support moved to maintenance mode as of v1.31, with v2 stable since v1.25. The newsletter also links RBAC research across over 65,000 clusters, new tools like flux9s and CiliumHound, and upcoming KubeCon dates. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does CVE-2026-94603 affect in Podman and how is it fixed? CVE-2026-94603 is a critical Podman vulnerability with a CVSS score of 10.0 where images annotated as checkpoints can make 'podman run' ignore all sandboxing flags and user-specified security options, disabling namespace isolation and capability dropping. It is patched in Podman 5.8.8 and 6.1.3. _Teams running untrusted container images track critical Podman fixes like this one on daily.dev._ ### What happened with Docker Hub CVE-2026-105445 and personal access tokens? CVE-2026-105445 describes a Docker Hub flaw where converting a personal account into an organization could re-assign a user's personal access tokens to the new organization owner, potentially exposing them to someone else. Docker Hub issued a security advisory covering what happened, who was affected, and the fix. _Developers auditing their Docker Hub token exposure can follow advisories like this on daily.dev._ ### When did Kubernetes cgroup v1 support move to maintenance mode? Kubernetes cgroup v1 management moved into maintenance mode with the release of Kubernetes v1.31, while cgroup v2 support has been stable since Kubernetes v1.25. Cgroups are the Linux kernel feature Kubernetes uses to allocate CPU and memory resources to containers. _Platform engineers planning a cgroup v2 migration can track Kubernetes version changes like this on daily.dev._ ## Similar posts on daily.dev - [gVisor is being donated to CNCF](https://daily.dev/posts/gvisor-is-being-donated-to-cncf-8kbsvk56x) · Lobsters · 1 upvotes · 1 comments - [CloudNative.Now](https://daily.dev/posts/cloudnative-now-cjxncho1h) · CloudNative.Now · 0 upvotes · 0 comments - [k0s in 2025: A year of community growth, governance, and Kubernetes innovation](https://daily.dev/posts/k0s-in-2025-a-year-of-community-growth-governance-and-kubernetes-innovation-3eyzw3pbd) · CNCF · 1 upvotes · 0 comments - [CloudNative.Now](https://daily.dev/posts/cloudnative-now-jvowzmaph) · CloudNative.Now · 0 upvotes · 0 comments --- Tags: [#linux](https://daily.dev/tags/linux), [#kubernetes](https://daily.dev/tags/kubernetes), [#containers](https://daily.dev/tags/containers), [#cloud-native](https://daily.dev/tags/cloud-native), [#cncf](https://daily.dev/tags/cncf) [View this post on daily.dev](https://daily.dev/posts/october-2026-onlbuv50f) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"October 2026","url":"https://daily.dev/posts/october-2026-onlbuv50f","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/october-2026-onlbuv50f"},"datePublished":"2026-10-30T06:55:14.215Z","dateModified":"2026-10-30T06:55:44.092Z","description":"This monthly cloud native roundup covers Kubernetes governance, security incidents and new tooling. Google is donating gVisor to the CNCF as a Sandbox project,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/238a79c6e8a104e6b2671f7ddb16e49d?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/238a79c6e8a104e6b2671f7ddb16e49d?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CloudNative.Now","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CloudNative.Now","logo":"https://media.daily.dev/image/upload/s--T9R9I0TQ--/f_auto,q_auto/v1769934829/logos/cloudnative","url":"https://daily.dev/sources/cloudnative"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/october-2026-onlbuv50f","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"linux,kubernetes,containers,cloud-native,cncf","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CloudNative.Now","item":"https://daily.dev/sources/cloudnative"},{"@type":"ListItem","position":3,"name":"October 2026"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/october-2026-onlbuv50f#faq","mainEntity":[{"@type":"Question","name":"What does CVE-2026-94603 affect in Podman and how is it fixed?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-94603 is a critical Podman vulnerability with a CVSS score of 10.0 where images annotated as checkpoints can make 'podman run' ignore all sandboxing flags and user-specified security options, disabling namespace isolation and capability dropping. It is patched in Podman 5.8.8 and 6.1.3. Teams running untrusted container images track critical Podman fixes like this one on daily.dev."}},{"@type":"Question","name":"What happened with Docker Hub CVE-2026-105445 and personal access tokens?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-105445 describes a Docker Hub flaw where converting a personal account into an organization could re-assign a user's personal access tokens to the new organization owner, potentially exposing them to someone else. Docker Hub issued a security advisory covering what happened, who was affected, and the fix. Developers auditing their Docker Hub token exposure can follow advisories like this on daily.dev."}},{"@type":"Question","name":"When did Kubernetes cgroup v1 support move to maintenance mode?","acceptedAnswer":{"@type":"Answer","text":"Kubernetes cgroup v1 management moved into maintenance mode with the release of Kubernetes v1.31, while cgroup v2 support has been stable since Kubernetes v1.25. Cgroups are the Linux kernel feature Kubernetes uses to allocate CPU and memory resources to containers. Platform engineers planning a cgroup v2 migration can track Kubernetes version changes like this on daily.dev."}}]} ```