Sabuntawa don Java SE, MySQL, VirtualBox da sauran samfuran Oracle tare da ƙayyadaddun lahani

Kamfanin Oracle aka buga shirin sakin sabuntawa ga samfuran sa (Critical Patch Update), da nufin kawar da matsaloli masu mahimmanci da lahani. A cikin sabuntawar Afrilu an kawar da wannan gaba ɗaya 297 rauni.

A cikin batutuwa Java SE 12.0.1, 11.0.3 da 8u212 An gyara al'amuran tsaro 5. Ana iya amfani da duk lahani daga nesa ba tare da tantancewa ba. Lalacewar ɗaya ta musamman ga dandalin Windows sanyawa CVSS Score 9.0 (CVE-2019-2699), wanda yayi daidai da matakin haɗari mai mahimmanci kuma yana bawa mai amfani mara inganci akan hanyar sadarwar damar yin sulhu da aikace-aikacen Java SE. Rashin lahani guda biyu a cikin tsarin sarrafa hoto na 2D an sanya matakin 8.1 (CVE-2019-2697, CVE-2019-2698). Har yanzu ba a bayyana cikakken bayani ba.

Baya ga batutuwan da ke cikin Java SE, an bayyana lahani a cikin wasu samfuran Oracle, gami da:

  • 40 rauni a cikin MySQL (mafi girman girman matakin 7.5). Matsala mafi hatsari
    (CVE-2019-2632) yana shafar ingantaccen tsarin plugin ɗin. Za a gyara al'amura a cikin sakewa MySQL Community Server 8.0.16, 5.7.26 da 5.6.44.

  • 12 rauni a cikin VirtualBox, wanda 7 ke da matsananciyar haɗari (CVSS Score 8.8). An gyara lahani a cikin sabuntawa VirtualBox 6.0.6 da 5.2.28 (cikin bayanin kula kasancewar an magance matsalolin tsaro ba a tallata shi ba kafin a saki). Ba a bayar da cikakkun bayanai ba, amma idan aka yi la'akari da matakin CVSS, an gyara raunin da ya faru, nuna a gasar Pwn2Own 2019 kuma yana ba ku damar aiwatar da lamba a gefen tsarin runduna daga yanayin tsarin baƙi.

    ba ka damar kai farmaki da rundunar tsarin daga baƙo yanayi.

  • 3 rauni akan Solaris (mafi girman girman 5.3 - matsaloli tare da mai sarrafa fakitin IPS, SunSSH da sabis na kula da kulle. Matsalolin da aka gyara a cikin saki
    Farashin 11.4 SRU8, wanda kuma ya dawo da tallafi ga ɗakunan karatu na UCB (libucb, librpcsoc, libdbm, libtermcap, libcurses) da sabis na fc-fabric, fakitin da aka sabunta.
    ibus 1.5.19, NTP 4.2.8p12,
    Firefox 60.6.0 esr,
    DAURE 9.11.6
    Bude SSL 1.0.2r,
    MySQL 5.6.43 & 5.7.25,
    libxml2 2.9.9,
    libxslt 1.1.33,
    Wireshark 2.6.7,
    6.1.0.20190105,
    Apache httpd 2.4.38,
    kashi 5.22.

source: budenet.ru

Add a comment