Catégorie : Veille sécurité – Patchs

This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.4 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have…

La page officielle Apache HTTP Server 2.4 contient des références CVE. Vérifier la version httpd installée et les correctifs disponibles côté distribution.

# Remote Code Execution via dol_eval sandbox bypass in computed extrafields ## Summary A sandbox bypass in `dol_eval_standard()` allows an authenticated administrator to achieve Remote Code Execution (RCE) by creating a malicious computed extrafield. The sandbox’s whitelist path fails to block arbitrary class instantiation, callable…

### Summary A SQL Injection vulnerability exists in the Third Party (Company) update functionality of Dolibarr ERP/CRM. The `localtax1_value` parameter (`lt1`) is concatenated directly into an SQL UPDATE statement in `societe/class/societe.class.php` at line 1672 without any escaping, type casting, or parameterized query binding. An authenticated…

This security and maintenance release features 7 security fixes and 4 bug fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 7.1.3 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click…

La page officielle Apache HTTP Server 2.4 contient des références CVE. Vérifier la version httpd installée et les correctifs disponibles côté distribution.

I would like to announce the release of MediaWiki 1.43.10, 1.45.5 and 1.46.1! These releases serve as security and maintenance releases for these branches. The tarballs have already been uploaded as of this email, and the git tags will be pushed shortly. A « MediaWiki Extensions…

Greetings- With the security/maintenance release of MediaWiki 1.43.10/1.45.5/1.46.1, we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks, security patches and backports [1]: WikiLambda + (T428829, CVE-2026-103046) – WikifunctionsFragmentRenderer does unsafe string replacements on user-provided HTML https://gerrit.wikimedia.org/r/c/1307827…

Hi all, Tomorrow (October 1st) we will be issuing a security and maintenance release to all supported branches of MediaWiki. The new releases will be: – 1.43.10 – 1.45.5 – 1.46.1 This will also resolve security issues in bundled extensions, along with bug fixes included…

Le flux Zimbra Security Advisory a été mis à jour. Dernière entrée détectée : Zimbra Security Advisories revision 71508. Consulter la page officielle Zimbra Security Advisories pour vérifier les CVE concernées, les versions impactées et les patchs à appliquer. Dernières entrées du flux : -…