{"id":31765,"date":"2019-10-31T21:42:55","date_gmt":"2019-10-31T18:42:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/obnovlenie-java-se-mysql-virtualbox-i-drugih-produktov-oracle-s-ustraneniem-uyazvimostej\/"},"modified":"2019-10-31T21:42:55","modified_gmt":"2019-10-31T18:42:55","slug":"obnovlenie-java-se-mysql-virtualbox-i-drugih-produktov-oracle-s-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-java-se-mysql-virtualbox-i-drugih-produktov-oracle-s-ustraneniem-uyazvimostej","title":{"rendered":"Mise \u00e0 jour de Java SE, MySQL, VirtualBox et d'autres produits Oracle avec correction de vuln\u00e9rabilit\u00e9s.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Soci\u00e9t\u00e9 Oracle <noindex><a rel=\"nofollow\" href=\"https:\/\/blogs.oracle.com\/security\/april-2019-critical-patch-update-released\">a publi\u00e9<\/a><\/noindex> mise \u00e0 jour planifi\u00e9e des produits (Critical Patch Update) visant \u00e0 corriger des probl\u00e8mes critiques et des vuln\u00e9rabilit\u00e9s. La mise \u00e0 jour d'avril corrige en tout <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oracle.com\/technetwork\/security-advisory\/cpuapr2019-5072813.html\">297 vuln\u00e9rabilit\u00e9s<\/a><\/noindex>.<\/p>\n<p>Dans les versions <noindex><a rel=\"nofollow\" href=\"http:\/\/www.oracle.com\/technetwork\/java\/javase\/downloads\/index.html\">Java SE 12.0.1, 11.0.3 et 8u212<\/a><\/noindex> 5 probl\u00e8mes de s\u00e9curit\u00e9 ont \u00e9t\u00e9 corrig\u00e9s. Toutes les vuln\u00e9rabilit\u00e9s peuvent \u00eatre exploit\u00e9es \u00e0 distance sans authentification. Une vuln\u00e9rabilit\u00e9 sp\u00e9cifique \u00e0 la plateforme Windows <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oracle.com\/technetwork\/security-advisory\/cpuapr2019-5072813.html#AppendixJAVA\">sont attribu\u00e9es<\/a><\/noindex> Score CVSS 9.0 (CVE-2019-2699), ce qui correspond \u00e0 un niveau de gravit\u00e9 critique et permet \u00e0 un utilisateur non authentifi\u00e9 d'acc\u00e9der \u00e0 distance aux applications sur Java SE. Deux vuln\u00e9rabilit\u00e9s dans le sous-syst\u00e8me de traitement graphique 2D ont un niveau de gravit\u00e9 de 8.1 (CVE-2019-2697, CVE-2019-2698). Les d\u00e9tails ne sont pas encore divulgu\u00e9s.<\/p>\n<p>En plus des probl\u00e8mes dans Java SE, des vuln\u00e9rabilit\u00e9s ont \u00e9galement \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9es dans d'autres produits Oracle, tels que :\n<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oracle.com\/technetwork\/security-advisory\/cpuapr2019-5072813.html#AppendixMSQL\">40 vuln\u00e9rabilit\u00e9s<\/a><\/noindex> dans MySQL (niveau de gravit\u00e9 maximal 7.5). Le probl\u00e8me le plus critique<br \/>\n(<noindex><a rel=\"nofollow\" href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2019-2632\">CVE-2019-2632<\/a><\/noindex>) concerne le sous-syst\u00e8me des modules d'authentification. Les probl\u00e8mes seront corrig\u00e9s dans les versions <noindex><a rel=\"nofollow\" href=\"http:\/\/dev.mysql.com\/downloads\/mysql\/\">MySQL Community Server 8.0.16, 5.7.26 et 5.6.44<\/a><\/noindex>.<\/p>\n<\/li>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oracle.com\/technetwork\/security-advisory\/cpuapr2019-5072813.html#AppendixOVIR\">12 vuln\u00e9rabilit\u00e9s<\/a><\/noindex> dans VirtualBox, dont 7 ont un degr\u00e9 de gravit\u00e9 critique (Score CVSS 8.8). Les vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les mises \u00e0 jour <noindex><a rel=\"nofollow\" href=\"https:\/\/www.virtualbox.org\/wiki\/Changelog-6.0\">VirtualBox 6.0.6 et 5.2.28<\/a><\/noindex> (dans <noindex><a rel=\"nofollow\" href=\"https:\/\/www.virtualbox.org\/wiki\/Changelog\">note<\/a><\/noindex> relatif \u00e0 la publication, le fait que les probl\u00e8mes de s\u00e9curit\u00e9 aient \u00e9t\u00e9 corrig\u00e9s n'a pas \u00e9t\u00e9 annonc\u00e9). Les d\u00e9tails ne sont pas communiqu\u00e9s, mais \u00e9tant donn\u00e9 le niveau de CVSS, les vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50376\">d\u00e9montr\u00e9es<\/a><\/noindex> lors du concours Pwn2Own 2019 et permettant d'ex\u00e9cuter du code sur le syst\u00e8me h\u00f4te \u00e0 partir de l'environnement invit\u00e9.\n<p> permettent d'attaquer le syst\u00e8me h\u00f4te \u00e0 partir de l'environnement invit\u00e9.<\/p>\n<\/li>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oracle.com\/technetwork\/security-advisory\/cpuapr2019-5072813.html#AppendixSUNS\">3 vuln\u00e9rabilit\u00e9s<\/a><\/noindex> dans Solaris (degr\u00e9 de danger maximal 5.3 \u2014 probl\u00e8mes dans le gestionnaire de paquets IPS, SunSSH et le service de gestion des verrous. Probl\u00e8mes r\u00e9solus dans la version<br \/>\n <noindex><a rel=\"nofollow\" href=\"https:\/\/blogs.oracle.com\/solaris\/announcing-oracle-solaris-114-sru8\">Solaris 11.4 SRU8<\/a><\/noindex>, qui a \u00e9galement r\u00e9tabli le support des biblioth\u00e8ques UCB (libucb, librpcsoc, libdbm, libtermcap, libcurses) et du service fc-fabric, mis \u00e0 jour les versions des paquets<br \/>\nibus 1.5.19, NTP 4.2.8p12,<br \/>\n    Firefox 60.6.0esr,<br \/>\n    BIND 9.11.6,<br \/>\n    OpenSSL 1.0.2r,<br \/>\n    MySQL 5.6.43 &amp; 5.7.25,<br \/>\n    libxml2 2.9.9,<br \/>\n    libxslt 1.1.33,<br \/>\n    Wireshark 2.6.7,<br \/>\n    ncurses 6.1.0.20190105,<br \/>\n    Apache httpd 2.4.38,<br \/>\n    perl 5.22.<\/p>\n<\/li>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50527\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Oracle \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 (Critical Patch Update), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0432 \u0441\u0443\u043c\u043c\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 297 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 Java SE 12.0.1, 11.0.3 \u0438 8u212 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 5 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e. \u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u043e\u0439 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows, \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31765","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Oracle \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 (Critical Patch.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-java-se-mysql-virtualbox-i-drugih-produktov-oracle-s-ustraneniem-uyazvimostej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Java SE, MySQL, VirtualBox \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Oracle \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Oracle \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 (Critical Patch.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-java-se-mysql-virtualbox-i-drugih-produktov-oracle-s-ustraneniem-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:42:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:42:55+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mise \u00e0 jour de Java SE, MySQL, VirtualBox et d'autres produits Oracle avec correction des vuln\u00e9rabilit\u00e9s | ProHoster","description":"La soci\u00e9t\u00e9 Oracle a publi\u00e9 une mise \u00e0 jour planifi\u00e9e de ses produits (Critical Patch.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-java-se-mysql-virtualbox-i-drugih-produktov-oracle-s-ustraneniem-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Java SE, MySQL, VirtualBox \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Oracle \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Oracle \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 (Critical Patch.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-java-se-mysql-virtualbox-i-drugih-produktov-oracle-s-ustraneniem-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:55+00:00","article:modified_time":"2019-10-31T18:42:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31765","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 07:43:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:11:22","updated":"2026-01-21 07:43:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/31765","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=31765"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/31765\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=31765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=31765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=31765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}