LG TV flaws could let attackers listen in, even in standby mode

Smart TVs are internet-connected computers with microphones, app stores, advertising systems, and access to the same home networks used by your family's phones, laptops, printers, and smart-home devices. A major manufacturer in Smart TVs, LG, has come under the spotlight this week after an...

GO-2026-6225 Credential leakage to untrusted hosts in github.com/chrismellard/docker-credential-acr-env

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

PT-2026-80446

In github.com/chrismellard/docker-credential-acr-env/pkg/credhelper, the regular expression used by isACRRegistry to validate Azure Container Registry hostnames is unanchored. As a result, arbitrary hostnames containing the substring ".azurecr.io" such as evil.azurecr.io.attacker.com are treated ...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: gitness, dgraph, docker-credential-acr-env, docker-credential-acr-env-fips...

GO-2020-0017 vulnerabilities

Vulnerabilities for packages: dgraph, gitness, docker-credential-acr-env...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: dagdotdev, contour, hydra, crane, rancher-helm, helm-mapkubeapis, falco-no-driver, gcsfuse, incert, velero-plugin-for-csi, redka, terraform, sriov-network-device-plugin, rancher-system-agent, govulncheck, src-fingerprint, metrics-server, bom, dockerize, delve, rekor,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: dagdotdev, contour, hydra, crane, rancher-helm, helm-mapkubeapis, falco-no-driver, gcsfuse, incert, velero-plugin-for-csi, redka, terraform, sriov-network-device-plugin, rancher-system-agent, govulncheck, src-fingerprint, metrics-server, bom, dockerize, delve, rekor,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: knative-serving, osv-scanner, grafana-rollout-operator, kserve, neuvector-scanner, rancher-helm, falco-no-driver, redka, crossplane-provider-aws-cloudwatchlogs, dapr, opa, govulncheck, paranoia, grafana-alloy, metrics-server, src-fingerprint, step-issuer,...

GO-2023-2402 vulnerabilities

Vulnerabilities for packages: nats-server, terraform, buf, grype, src-fingerprint, metrics-server, bom, dockerize, eksctl, libssh2, rekor, aactl, atlantis, flux, ollama, wireguard-go, secrets-store-csi-driver, kots, local-path-provisioner, src, ferretdb, cortex, k8sgpt, kaf, hugo, helm-push, apko...

GO-2024-2825 vulnerabilities

Vulnerabilities for packages: spegel, kyverno-policy-reporter-ui, nats-server, neuvector-scanner, osv-scanner, crane, redka, opa, govulncheck, paranoia, src-fingerprint, metrics-server, bom, dockerize, rabbitmq-default-user-credential-updater, delve, eksctl, rekor, aactl, atlantis, wireguard-go,...

EUVD-2026-45440

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...

CVE-2026-53370

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...

CVE-2026-53370

The CVE-2026-53370 issue affects the Linux kernel (perf/x86/intel) related to Auto Counter Reload (ACR) mask validation. Root cause: user-space ACR mask validation (attr.config2) could permit indices from other ACR groups; an invalid mask could cause an early return and skip subsequent groups; hw...

CVE-2026-53370: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: perf/x86: Fixed the potential issue with bad containerof in intelpmuhwconfig. The auto counter reload may involve a group of events, some of which are software-related. The software event related to the PMU is not equivalent t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: perf/x86/intel: Fixed an access error when accessing the IA32PMCxCFGB MSRs When running perffuzzer on PTL, sometimes the “unchecked MSR access error” is observed when accessing the IA32PMCxCFGB MSRs. 55.611268 Unchecked MSR...

PT-2026-42888

Summary If you have the MCP Server ID, you can connect to the MCP server even if you don't have permissions to the server. The MCP gateway endpoint /mcp-connect/mcp id does not enforce Access Control Rules ACRs. Any authenticated Obot user who possesses an MCP Server ID can connect to that server...

The game is over: when “free” comes at too high a price. What we know about RenEngine

We often describe cases of malware distribution under the guise of game cheats and pirated software. Sometimes such methods are used to spread complex malware that employs advanced techniques and sophisticated infection chains. In February 2026, researchers from Howler Cell announced the discover...

[SECURITY] Fedora 41 Update: xmedcon-0.25.3-1.fc41

This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...

[SECURITY] Fedora 42 Update: xmedcon-0.25.3-1.fc42

This project stands for Medical Image Conversion and is released under the GNU's LGPL license. It bundles the C source code, a library, a flexible command-line utility and a graphical front-end based on the amazing Gtk+ toolkit. Its main purpose is image conversion while preserving valuable medic...