Kusagadzikana muApache NetBeans auto-update mechanism

Ruzivo rwakaburitswa nezve kusakwana kuviri muhurongwa hwekutumira otomatiki kwezvigadziriso zveApache NetBeans yakasanganiswa budiriro nharaunda, izvo zvinoita kuti zvikwanise kushata zvigadziriso uye nbm mapakeji anotumirwa neseva. Matambudziko akagadziriswa chinyararire mukuburitswa Apache NetBeans 11.3.

Kutanga kusagadzikana (CVE-2019-17560) inokonzerwa nekushaikwa kwekusimbiswa kweSSL zvitupa uye mazita evatambi paunenge uchidhawunirodha data pamusoro peHTTPS, izvo zvinoita kuti zvikwanise kubiridzira data rakatorwa. Kusagadzikana kwechipiri (CVE-2019-17561) inosanganiswa nekusakwana kusimbiswa kwechinyorwa chakadhindwa uchishandisa siginecha yedhijitari, iyo inobvumira anorwisa kuwedzera imwe kodhi kune nbm mafaera pasina kukanganisa kutendeseka kwepakeji.

Source: opennet.ru

Voeg