As an update to FortiOS thing - fixes are out for all the Fortigate versions except 6.4.x branch which has no fix still.
End of support versions - 6.2 and below - also vulnerable but no fix as EOL.
It looks like fix started in branches almost a year ago and hasn't been documented.
Not terribly exciting and you should probably be eating mince pies instead.
Kevin Beaumont /
npub176…fkwlw
2024-12-23 14:53:54
in reply to nevent1q…uf7w
Author Public Key
npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlwPublished at
2024-12-23 14:53:54Event JSON
{
"id": "481ef8ee9f1913012af6eca3cc94cc128f2932b36676751c6b78173eb72aa0c9",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1734965634,
"kind": 1,
"tags": [
[
"e",
"378e34b989685496e3b4bcef025aa8d3bd53c7a2fe4bff48c6b6b27071591859",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/113702707828587402",
"activitypub"
]
],
"content": "As an update to FortiOS thing - fixes are out for all the Fortigate versions except 6.4.x branch which has no fix still.\n\nEnd of support versions - 6.2 and below - also vulnerable but no fix as EOL.\n\nIt looks like fix started in branches almost a year ago and hasn't been documented.\n\nNot terribly exciting and you should probably be eating mince pies instead.",
"sig": "f5398ff6c81dadde3ed2c8178b99a3b2bbbc6d0c4add5bfd314ddf08d053dc6b122fe353b8cb5bdc60a5b658d739ca79dca03b2e92bfe79e54a531fff38c0112"
}