Cusboonaysiinta Java SE, MySQL, VirtualBox iyo alaabada kale ee Oracle ee leh baylahda go'an

Shirkadda Oracle la daabacay la qorsheeyay in la sii daayo cusboonaysiinta alaabtooda (Critical Patch Update), oo looga dan leeyahay in meesha laga saaro dhibaatooyinka muhiimka ah iyo dayacanka. Cusboonaysiinta Jannaayo, lacagta waa la tirtiray 397 baylahda.

Arrimaha Java SE 14.0.1, 11.0.7 iyo 8u251 meesha laga saaray 15 arrimaha amniga. Dhammaan baylahda waxaa laga faa'iidaysan karaa meel fog iyadoon la xaqiijin. Heerka ugu sarreeya ee darnaanta waa 8.3, kaas oo loo qoondeeyay dhibaatooyinka maktabadaha (CVE-2020-2803, CVE-2020-2805). Laba dayacan (ee libxslt iyo JSSE) waxay leeyihiin heerar darnaan oo ah 8.1 iyo 7.5.

Marka laga soo tago arrimaha Java SE, dayacanka ayaa si guud loogu soo bandhigay alaabada kale ee Oracle, oo ay ku jiraan:

• 35 baylahda ee MySQL server iyo
  2 nuglaanta ee hirgelinta MySQL macmiilka (C API). Heerka ugu sarreeya ee darnaanta 9.8 waxaa loo qoondeeyey nuglaanshaha CVE-2019-5482, kaas oo soo baxa marka lagu soo ururiyo taageerada cURL. Arrimaha ku go'an siidaynta MySQL Community Server 8.0.20, 5.7.30 iyo 5.6.49.

• 19 baylahda, kuwaas oo 7 dhibaato ay leeyihiin heer halis ah (CVSS ka weyn 8). Tan waxaa ka mid ah hagaajinta baylahda loo isticmaalo weerarrada lagu soo bandhigay tartanka Pwn2Own 2020 iyo u oggolaanshaha, iyada oo loo marayo khalkhalgelinta dhinaca nidaamka martida, si ay u helaan nidaamka martigelinta oo ay ku fuliyaan koodka xuquuqda hypervisor. Nuglaanta waxa lagu hagaajiyaa cusboonaysiinta VirtualBox 6.1.6, 6.0.20 iyo 5.2.40.
• 6 baylahda ee Solaris. Heerka khatarta ugu badan 8.8 - gudaha laga shaqeeyo dhibaato gudaha Deegaanka Desktop-ka Guud, oo u oggolaanaya isticmaale aan mudnayn inuu fuliyo koodka mudnaanta xididka. Arrimo ayaa sidoo kale lagu hagaajiyay cutubka kernel ee fulinaya borotokoolka SMB, Whodo, iyo amarka SMF ee svcbundle. Arrimaha lagu go'aamiyay cusboonaysiinta shalay Solaris 11.4 SRU 20.

Source: opennet.ru