Une vulnérabilité a été découverte dans Fortinet FortiMail. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance. Fortinet indique que la vulnérabilité CVE-2026-104286 est activement exploitée. Des indicateurs de compromission sont disponibles dans l'avis de l'éditeur.
Source CERT-FR / ANSSIEtalab Open Licence v2.0 · Publisher excerpt shortened and converted to plain text. Original source license applies. See the attributed original source for its latest revision date. Reuse does not imply publisher endorsement.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
Source CERT-FR / ANSSIEtalab Open Licence v2.0 · Publisher excerpt shortened and converted to plain text. Original source license applies. See the attributed original source for its latest revision date. Reuse does not imply publisher endorsement.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.
Source CERT-FR / ANSSIEtalab Open Licence v2.0 · Publisher excerpt shortened and converted to plain text. Original source license applies. See the attributed original source for its latest revision date. Reuse does not imply publisher endorsement.
De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Source CERT-FR / ANSSIEtalab Open Licence v2.0 · Publisher excerpt shortened and converted to plain text. Original source license applies. See the attributed original source for its latest revision date. Reuse does not imply publisher endorsement.
CERT-FR's latest VMware advisory covers Spring Cloud Data Flow and Gateway for Kubernetes, plus Tanzu Postgres and Valkey products. Affected releases include Data Flow before 1.6.16 and Gateway before 2.2.17, with separate thresholds for the other products. The notice leaves the security impact unspecified and directs administrators to the linked VMware bulletins for applicable fixes.
Source CERT-FR / ANSSIEtalab Open Licence v2.0 · Source material adapted into an original NexusTechWire brief. Original source license applies. See the attributed original source for its latest revision date. Reuse does not imply publisher endorsement.
An update for libpcap is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
An update for pcp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
An update for pcp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Red Hat OpenShift Container Platform release 4.18.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Red Hat JBoss Web Server 6.2.5 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
A new release is now available for Red Hat Satellite 6.18 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
EFF reports that a federal judge temporarily blocked enforcement of Utah’s VPN-related location requirements in SB 73. The organization argues that websites cannot reliably determine every VPN user’s physical location and that the requirements would expand invasive age checks beyond Utah. The ruling is a preliminary injunction, rather than a final decision; the lawsuit does not challenge the separate restriction on sharing VPN instructions.
Source Electronic Frontier FoundationBy Rindala AlajajiCC BY 4.0 · Source material adapted into an original NexusTechWire brief. Original source license applies.
EFF is using its Opt Out October campaign to encourage people to reconsider default reliance on major technology companies. Its resource hub points to alternative software, social platforms and operating systems, alongside controls for how services use personal data in AI training. The campaign frames switching tools as one route to greater control over data; these are EFF’s advocacy recommendations, not an independent evaluation of every alternative.
Source Electronic Frontier FoundationBy Thorin KlosowskiCC BY 4.0 · Source material adapted into an original NexusTechWire brief. Original source license applies.
An update for skopeo is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Red Hat OpenShift Container Platform release 4.12.99 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Red Hat OpenShift Container Platform release 4.12.99 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Turning on code scanning no longer starts months of weekly scans for an otherwise dormant repository. GitHub still runs the initial validation, but scheduled scanning begins only after a push or pull request triggers analysis. The change applies to Enterprise Cloud, requires no configuration changes and is planned for Enterprise Server 3.24.
A new branch without a pull request will no longer make GitHub's code coverage upload step fail CI. The action now skips that upload and explains why. For workflows triggered only by pushes, opening a pull request does not itself resume uploads: coverage returns on the next push unless a pull-request trigger is also configured.
Canonical has issued fixes for four GStreamer Good Plugins flaws involving FLAC audio, AVI files and closed-caption data. The notice describes possible information exposure or denial of service, depending on the flaw. Updates cover several Ubuntu LTS releases; fixes for older releases require Ubuntu Pro, with Legacy Support also specified for 16.04. The notice does not establish active exploitation.
Red Hat JBoss Web Server 6.2.5 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Red Hat OpenShift Container Platform release 4.18.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
An update for dracut is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
A new release is now available for Red Hat Satellite 6.19 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Original briefs are AI-assisted and checked against the linked source. Publisher excerpts are labeled separately; each story keeps its original date and article link.
