Rashin lahani a cikin tsarin sabunta atomatik NetBeans Apache

An bayyana bayanin game da lahani guda biyu a cikin tsarin isar da sabuntawa ta atomatik ga Apache NetBeans hadedde yanayin haɓakawa, wanda ke ba da damar haɓaka sabuntawa da fakitin nbm da sabar ta aika. An gyara matsalolin cikin nutsuwa a cikin sakin Apacen NetBeans 11.3.

Lalacewar farko (CVE-2019-17560) yana faruwa ne sakamakon rashin tabbatar da takaddun shaida na SSL da sunayen masu masaukin baki yayin zazzage bayanai akan HTTPS, wanda ke ba da damar ɓoye bayanan da aka sauke. Na biyu rauni (CVE-2019-17561) yana da alaƙa da rashin cikakkiyar tabbaci na ɗaukakawar da aka zazzage ta amfani da sa hannu na dijital, wanda ke bawa maharin damar ƙara ƙarin lambar zuwa fayilolin nbm ba tare da lalata amincin fakitin ba.

source: budenet.ru

Add a comment