Debian/netbeans: critical 9.1
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the downloa
Action: Upgrade netbeans to 12.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.1-1 | - |
Fixed versions
| 12.1-1 |
Sources
- osv: DEBIAN-CVE-2019-17560#Debian:13/netbeans
- https://security-tracker.debian.org/tracker/CVE-2019-17560
published · modified · JSON