Zosintha za Java SE, MySQL, VirtualBox ndi zinthu zina za Oracle zokhala ndi zovuta zokhazikika

Kampani ya Oracle losindikizidwa kumasulidwa kosinthidwa kwazinthu zawo (Critical Patch Update), pofuna kuthetsa mavuto aakulu ndi ziwopsezo. Mu Januwale pomwe, ndalamazo zidachotsedwa 334 zofooka.

Mu nkhani Java SE 13.0.2, 11.0.6 ndi 8u241 kuthetsedwa 12 nkhani zachitetezo. Zowopsa zonse zitha kugwiritsidwa ntchito kutali popanda kutsimikizika. Mulingo wovuta kwambiri ndi 8.1, womwe umaperekedwa ku nkhani ya serialization (CVE-2020-2604) yomwe imalola kuti mapulogalamu a Java SE asokonezedwe popereka deta yopangidwa mwapadera. Zofooka zitatu zili ndi mulingo wovuta wa 7.5. Nkhanizi zilipo mu JavaFX ndipo zimayamba chifukwa cha kusatetezeka kwa SQLite ndi libxslt.

Kuphatikiza pazovuta za Java SE, zofooka zawonetsedwa poyera pazinthu zina za Oracle, kuphatikiza:

• 12 zofooka mu seva ya MySQL ndi
  Zowopsa za 3 pakukhazikitsa kasitomala wa MySQL (C API). Mulingo wapamwamba kwambiri wa 6.5 umaperekedwa kumavuto atatu mu MySQL parser ndi optimizer.
  Nkhani zokhazikika muzotulutsa MySQL Community Server 8.0.19, 5.7.29 ndi 5.6.47.

• 18 zofooka mu VirtualBox, omwe 6 ali ndi chiopsezo chachikulu (CVSS Score 8.2 ndi 7.5). Zowopsa zidzasinthidwa pazosintha VirtualBox 6.1.2, 6.0.16 ndi 5.2.36zomwe zikuyembekezeredwa lero.
• 10 zofooka ku Solaris. Maximum Severity 8.8 ndi vuto lomwe limagwiritsidwa ntchito kwanuko mu Common Desktop Environment. Pamavuto omwe ali ndi kuchuluka kwamphamvu pamwamba pa 7, zofooka zam'deralo mu Consolidation Infrastructure ndi mafayilo amafayilo zitha kudziwikanso. Nkhani zakonzedwa muzosintha zadzulo Solaris 11.4 SRU 17.

Source: opennet.ru