Sabuntawa don Java SE, MySQL, VirtualBox da sauran samfuran Oracle tare da ƙayyadaddun lahani

Kamfanin Oracle aka buga shirin sakin sabuntawa ga samfuran sa (Critical Patch Update), da nufin kawar da matsaloli masu mahimmanci da lahani. A cikin Janairu update, jimlar 334 rauni.

A cikin batutuwa Java SE 13.0.2, 11.0.6 da 8u241 shafe 12 matsalolin tsaro. Ana iya amfani da duk lahani daga nesa ba tare da tantancewa ba. Matsakaicin matsakaicin matakin shine 8.1, wanda aka sanya shi zuwa batun serialization (CVE-2020-2604), wanda ke ba da damar aiwatar da aikace-aikacen Java SE ta hanyar watsa bayanan jeri na musamman. Rashin lahani guda uku suna da matsananciyar matakin 7.5. Waɗannan matsalolin suna nan a cikin JavaFX kuma suna haifar da lahani a cikin SQLite da libxslt.

Baya ga batutuwan da ke cikin Java SE, an bayyana lahani a cikin wasu samfuran Oracle, gami da:

• 12 rauni a cikin uwar garken MySQL kuma
  3 rashin lahani a cikin aiwatar da abokin ciniki na MySQL (C API). Mafi girman matakin 6.5 an sanya shi zuwa matsaloli uku a cikin MySQL parser da ingantawa.
  Matsalolin da aka gyara a cikin fitarwa MySQL Community Server 8.0.19, 5.7.29 da 5.6.47.

• 18 rauni a cikin VirtualBox, wanda 6 ke da babban matakin haɗari (CVSS Score 8.2 da 7.5). Za a gyara ɓarna a cikin sabuntawa VirtualBox 6.1.2, 6.0.16 da 5.2.36wanda ake sa ran a yau.
• 10 rauni in Solaris. Matsakaicin Tsanani 8.8 batu ne da ake amfani da shi a cikin gida a cikin Muhallin Desktop na gama gari. Batutuwa tare da matsananciyar matakin sama da 7 kuma sun haɗa da rashin lahani na gida a cikin Ƙarfafa Kayayyakin kayan more rayuwa da tsarin fayil. Abubuwan da aka gyara a cikin sabuntawar jiya Farashin 11.4 SRU 17.

source: budenet.ru