Catégorie : Veille sécurité – Patchs

Produit : Dolibarr Type : Security Advisory Criticité : critical CVE : CVE-2026-23500 Date source : 17/04/2026 01:57 Résumé :### Summary An authenticated administrator can execute arbitrary operating system commands by injecting a malicious payload into the `MAIN_ODT_AS_PDF` configuration constant. This vulnerability exists because the application fails to properly validate or escape the command path…

Produit : MediaWiki Type : Release / Sécurité CVE : CVE-2026-5762, CVE-2026-39838, CVE-2026-39839, CVE-2026-39840, CVE-2026-39841, CVE-2026-39837, CVE-2026-22711, CVE-2026-39937, CVE-2026-39933, CVE-2026-39934, CVE-2026-39935, CVE-2026-39936, CVE-2026-30977 Date source : 09/04/2026 15:36 Résumé :Greetings- With the security/maintenance release of MediaWiki 1.43.7/1.44.4/1.45.2, we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks,…

Produit : MediaWiki Type : Release / Sécurité Date source : 01/04/2026 13:09 Résumé :I would like to announce the release of MediaWiki 1.43.8, 1.44.5 and 1.45.3! This release primarily serves as a security and maintenance release for thes branches. It fixes a mixture of backport issues, and drops some tests in AbuseFilter on REL1_43…

Produit : MediaWiki Type : Release / Sécurité CVE : CVE-2026-34092, CVE-2026-34088, CVE-2026-34091, CVE-2026-34090, CVE-2026-34087, CVE-2026-34093, CVE-2026-34086, CVE-2026-34094, CVE-2026-34089, CVE-2026-34095, CVE-2026-5266 Date source : 31/03/2026 23:06 Résumé :I would like to announce the release of MediaWiki 1.43.7, 1.44.4 and 1.45.2! These releases serve as security and maintenance releases for these branches. They ended up a…

Produit : MediaWiki Type : Release / Sécurité Date source : 30/03/2026 17:50 Résumé :Hi all, Tomorrow we will be issuing a security and maintenance release to all supported branches of MediaWiki. The new releases will be: – 1.43.7 – 1.44.4 – 1.45.2 This will also resolve security issues in bundled extensions, along with bug…

Produit : Dolibarr Type : Security Advisory Criticité : medium CVE : CVE-2026-34036 Date source : 25/03/2026 13:49 Résumé :# Authenticated Local File Inclusion (LFI) via selectobject.php leading to sensitive data disclosure ## Target Dolibarr Core (Tested on version 22.0.4) ## Summary I have discovered a Local File Inclusion (LFI) vulnerability in the core AJAX…

Produit : WordPress Type : Release / Sécurité / Maintenance Date source : 11/03/2026 15:34 Résumé :WordPress 6.9.4 is now available WordPress 6.9.2 and WordPress 6.9.3 were released yesterday, addressing 10 security issues and a bug that affected template file loading on a limited number of sites. The WordPress Security Team has discovered that not…

Produit : WordPress Type : Release / Sécurité / Maintenance Date source : 10/03/2026 15:43 Résumé :WordPress 6.9.2 is now available This is a security release that features several fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 6.9.2 from WordPress.org, or visit your…

Produit : MediaWiki Type : Release / Sécurité CVE : CVE-2025-62508, CVE-2026-0668, CVE-2026-0669, CVE-2026-0671, CVE-2026-0670, CVE-2026-22710, CVE-2026-22714, CVE-2026-22713, CVE-2026-22712, CVE-2026-0817 Date source : 09/01/2026 17:54 Résumé :Greetings- With the security/maintenance release of MediaWiki 1.39.16/1.43.6/1.44.3/1.45.1, we would also like to provide this supplementary announcement of MediaWiki extensions and skins with now-public Phabricator tasks, security patches and…

Produit : MediaWiki Type : Release / Sécurité Date source : 29/12/2025 20:36 Résumé :As per the MediaWiki version lifecycle[1], I would like to announce the formal end of life (EOL) of MediaWiki 1.39 as of December 31, 2025. 1.39.17 is expected to be the last release for this branch. This means that MediaWiki 1.39…