Zosintha za Java SE, MySQL, VirtualBox ndi zinthu zina za Oracle zokhala ndi zovuta zokhazikika

Kampani ya Oracle losindikizidwa kumasulidwa kosinthidwa kwazinthu zawo (Critical Patch Update), pofuna kuthetsa mavuto aakulu ndi ziwopsezo. Mu Januwale pomwe, ndalamazo zidachotsedwa 397 zofooka.

Mu nkhani Java SE 14.0.1, 11.0.7 ndi 8u251 kuthetsedwa 15 nkhani zachitetezo. Zowopsa zonse zitha kugwiritsidwa ntchito kutali popanda kutsimikizika. Mulingo wapamwamba kwambiri ndi 8.3, womwe umaperekedwa kumavuto m'malaibulale (CVE-2020-2803, CVE-2020-2805). Ziwopsezo ziwiri (mu libxslt ndi JSSE) zili ndi milingo yowopsa ya 8.1 ndi 7.5.

Kuphatikiza pazovuta za Java SE, zofooka zawonetsedwa poyera pazinthu zina za Oracle, kuphatikiza:

• 35 zofooka mu seva ya MySQL ndi
  2 pakukhazikitsa kasitomala wa MySQL (C API). Mulingo wapamwamba kwambiri wa 9.8 umaperekedwa pachiwopsezo cha CVE-2019-5482, chomwe chimawoneka chikaphatikizidwa ndi chithandizo cha cURL. Nkhani zokhazikika muzotulutsa MySQL Community Server 8.0.20, 5.7.30 ndi 5.6.49.

• 19 zofooka, omwe mavuto a 7 ali ndi mlingo woopsa kwambiri (CVSS wamkulu kuposa 8). Izi zikuphatikiza kukonza zofooka zomwe zimagwiritsidwa ntchito pamipikisano yomwe ikuwonetsedwa pampikisano Pwn2Own 2020 ndi kulola, kupyolera mwachinyengo kumbali ya kachitidwe ka alendo, kuti apeze njira yosungiramo alendo ndikuchita kachidindo ndi ufulu wa hypervisor. Zowopsa zimakhazikika pazosintha VirtualBox 6.1.6, 6.0.20 ndi 5.2.40.
• 6 zofooka ku Solaris. Mulingo wowopsa kwambiri 8.8 - wogwiritsidwa ntchito kwanuko vuto mu Common Desktop Environment, kulola wogwiritsa ntchito wopanda mwayi kuti agwiritse ntchito code ndi mwayi wa mizu. Nkhani zakhazikitsidwanso mu gawo la kernel pokhazikitsa protocol ya SMB, mu Whodo, ndi svcbundle SMF command. Nkhani zakonzedwa muzosintha zadzulo Solaris 11.4 SRU 20.

Source: opennet.ru