Ko nga whakahoutanga mo Java SE, MySQL, VirtualBox me etahi atu hua Oracle me nga whakaraerae kua whakaritea

Kamupene Oracle whakaputaina kua whakamaheretia te tuku whakahou ki ana hua (Critical Patch Update), e whai ana ki te whakakore i nga raru nui me nga whakaraeraetanga. I roto i te whakahoutanga o Hurae, he katoa 443 whakaraeraetanga.

Nga take Java SE 14.0.2, 11.0.8 me 8u261 whakakorea 11 take haumarutangaKa taea te whakamahi mamao i ngā ngoikoretanga katoa me te kore e manatoko. Ko te taumata kino rawa atu, 8.3, ka tohaina ki ngā take i roto i te JavaFX me ngā whare pukapuka (CVE-2020-14664, CVE-2020-14583).
Kua whakatikahia te tuatoru o ngā ngoikoretanga tino kino (CVSS 7.4) i roto i te pūnaha tukatuka whakairoiro 2D. E rima ngā take e pā ana ki ngā pūnaha kiritaki anake (e whakahaere ana i te Java Web Start me ngā āporoti Java i roto i te pūtirotiro), ā, e ono e pā ana ki ngā whirihoranga Java kiritaki me te tūmau.

I tua atu i nga take i Java SE, kua whakapuakina nga whakaraeraetanga ki etahi atu hua Oracle, tae atu ki:

• 32 whakaraeraetanga i roto i te tūmau MySQL me
  E toru ngā ngoikoretanga i kitea i roto i te whakatinanatanga kiritaki MySQL (C API) me ngā hononga (C++ me ODBC). Ko te taumata kino rawa atu, 7.5, i tohaina ki te CVE-2020-1967, he ngoikoretanga e pā ana ki te kaha whakamunatanga e puta ana i te wā e whakahiato ana me te tautoko OpenSSL. I whakatikahia ngā take i roto i ngā putanga e whai ake nei: MySQL Community Server 8.0.21, 5.7.31 me 5.6.49.
• 25 whakaraeraetanga i roto i te VirtualBox. Ko te raruraru tino kino kua tohaina ki te taumata kino o te 8.2. Kua whakatikahia ngā ngoikoretanga i roto i ngā whakahōunga. VirtualBox 6.1.6, 6.0.20 me 5.2.40.
• 6 whakaraeraetanga Solaris. Taumata kino rawa atu 7.3 – te ngoikoretanga ka taea te whakamahi ā-rohe i roto i te Taputapu Atekōkiri Pūrere. Kua whakatikahia hoki ngā take i roto i te kernel, ngā tuhinga tukatuka mōkihi, me te libsuri. I whakatikahia ngā take i te whakahōunga o inanahi. Solaris 11.4 SRU23.

Source: opennet.ru