Also, since there's still confusion about the Fortigate issue - no, it isn't CVE-XYZ - no CVE is assigned still and there's still no advisory.