Catégorie : Veille sécurité – Patchs
-
[Apache httpd] Mise à jour des vulnérabilités Apache HTTP Server 2.4
La page officielle Apache HTTP Server 2.4 contient des références CVE. Vérifier la version httpd installée et les correctifs disponibles côté distribution.
-
[Zimbra] Mise à jour des Security Advisories Zimbra
Le flux Zimbra Security Advisory a été mis à jour. Dernière entrée détectée : Zimbra Security Advisories revision 71408. Consulter la page officielle Zimbra Security Advisories pour vérifier les CVE concernées, les versions impactées et les patchs à appliquer. Dernières entrées du flux : -…
-
[WordPress] WordPress 7.0 “Armstrong”
Produit : WordPress Type : Release / Sécurité / Maintenance Date source : 20/05/2026 18:41 Résumé :Explore AI abilities directly in your website, all managed from a central hub. Slide seamlessly through the sleek, new admin theme implemented across the dashboard. Ignite creative flow with new blocks and design tools, and tap into an expansive…
-
[Dolibarr] OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration
Produit : Dolibarr Type : Security Advisory Criticité : critical CVE : CVE-2026-23500 Date source : 17/04/2026 01:57 Résumé :### Summary An authenticated administrator can execute arbitrary operating system commands by injecting a malicious payload into the `MAIN_ODT_AS_PDF` configuration constant. This vulnerability exists because the application fails to properly validate or escape the command path…
-
[MediaWiki] [MediaWiki-announce] MediaWiki Extensions and Skins Security Release Supplement (1.43.7/1.44.4/1.45.2)
Produit : MediaWiki Type : Release / Sécurité CVE : CVE-2026-5762, CVE-2026-39838, CVE-2026-39839, CVE-2026-39840, CVE-2026-39841, CVE-2026-39837, CVE-2026-22711, CVE-2026-39937, CVE-2026-39933, CVE-2026-39934, CVE-2026-39935, CVE-2026-39936, CVE-2026-30977 Date source : 09/04/2026 15:36 Résumé :Greetings- With the security/maintenance release of MediaWiki 1.43.7/1.44.4/1.45.2, we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks,…
-
[MediaWiki] [MediaWiki-announce] Maintenance release: MediaWiki 1.43.8 / 1.44.5 / 1.45.3
Produit : MediaWiki Type : Release / Sécurité Date source : 01/04/2026 13:09 Résumé :I would like to announce the release of MediaWiki 1.43.8, 1.44.5 and 1.45.3! This release primarily serves as a security and maintenance release for thes branches. It fixes a mixture of backport issues, and drops some tests in AbuseFilter on REL1_43…
-
[MediaWiki] [MediaWiki-announce] Security and maintenance release: 1.43.7 / 1.44.4 / 1.45.2
Produit : MediaWiki Type : Release / Sécurité CVE : CVE-2026-34092, CVE-2026-34088, CVE-2026-34091, CVE-2026-34090, CVE-2026-34087, CVE-2026-34093, CVE-2026-34086, CVE-2026-34094, CVE-2026-34089, CVE-2026-34095, CVE-2026-5266 Date source : 31/03/2026 23:06 Résumé :I would like to announce the release of MediaWiki 1.43.7, 1.44.4 and 1.45.2! These releases serve as security and maintenance releases for these branches. They ended up a…
-
[MediaWiki] [MediaWiki-announce] Security pre-release announcement: 1.43.7 / 1.44.4 / 1.45.2
Produit : MediaWiki Type : Release / Sécurité Date source : 30/03/2026 17:50 Résumé :Hi all, Tomorrow we will be issuing a security and maintenance release to all supported branches of MediaWiki. The new releases will be: – 1.43.7 – 1.44.4 – 1.45.2 This will also resolve security issues in bundled extensions, along with bug…
-
[Dolibarr] Authenticated Local File Inclusion (LFI) via selectobject.php leading to sensitive data disclosure
Produit : Dolibarr Type : Security Advisory Criticité : medium CVE : CVE-2026-34036 Date source : 25/03/2026 13:49 Résumé :# Authenticated Local File Inclusion (LFI) via selectobject.php leading to sensitive data disclosure ## Target Dolibarr Core (Tested on version 22.0.4) ## Summary I have discovered a Local File Inclusion (LFI) vulnerability in the core AJAX…
-
[WordPress] WordPress 6.9.4 Release
Produit : WordPress Type : Release / Sécurité / Maintenance Date source : 11/03/2026 15:34 Résumé :WordPress 6.9.4 is now available WordPress 6.9.2 and WordPress 6.9.3 were released yesterday, addressing 10 security issues and a bug that affected template file loading on a limited number of sites. The WordPress Security Team has discovered that not…
