{"id":182553,"date":"2026-07-08T22:53:54","date_gmt":"2026-07-08T20:53:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd"},"modified":"2026-07-08T22:53:54","modified_gmt":"2026-07-08T20:53:54","slug":"novye-uyazvimosti-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd","title":{"rendered":"Uued haavatavused FreeBSD-s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex>          <a rel=\"nofollow\" id=\"memories_button\" href=\"#\" title=\"J\u00e4lgida\"><i class=\"icon-bell\"><\/i><\/a><br \/>2                            <\/p>\n<p>30. juuni 2026. aastal avaldati teated 13 uue haavatavuse parandamise kohta FreeBSD operatsioonis\u00fcsteemis.<\/p>\n<ul>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:37.vm.asc\">CVE-2026-49418<\/a>. Seadet, millel on m\u00e4lu kaardistamise liides, omava kasutaja v\u00f5ib korraldada double-free\/use-after-free tuumas. See v\u00f5ib p\u00f5hjustada \u00f5iguste t\u00f5usu. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:38.jail.asc\">CVE-2026-49419<\/a>. (ainult FreeBSD 15+) Praeguse jail'i refcounti kahekordne v\u00e4hendamine teise jail'i juurdep\u00e4\u00e4su k\u00e4sitlemise vigade korral jail descriptor'i kaudu (ilmusid FreeBSD 15-s), mis l\u00f5puks viib jail'i haldusstruktuuri mitteplaneeritud vabastamiseni ja j\u00e4rgneva use-after-free'i k\u00f5ikjal, kus see kasutatakse. Teoreetiliselt v\u00f5ib p\u00f5hjustada \u00f5iguste t\u00f5usu. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:39.execve.asc\">CVE-2026-49415<\/a>. setuid-programmi k\u00e4itamisel \u00f5igus juurdep\u00e4\u00e4suks tema m\u00e4lu m\u00e4\u00e4ratakse veidi hiljem, kui see m\u00e4lu initsialiseeritakse, mis v\u00f5imaldab l\u00fchikese aja jooksul sellele juurdep\u00e4\u00e4su saada ja seda redigeerida, omamata vajalikke \u00f5igusi, l\u00e4bi procfs v\u00f5i linprocfs. Enamikul s\u00fcsteemidest procfs ja veelgi enam libprocfs ei ole monteeritud, nii et probleem m\u00f5jutab t\u00f5en\u00e4oliselt v\u00e4heseid. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:40.zfs.asc\">CVE-2026-49429, CVE-2026-49430, CVE-2026-49431<\/a>. (ainult ZFS-iga s\u00fcsteemidele) Esimene kaks viga on seotud vale suurusega m\u00e4lu eraldamisega: eraldatakse puhver, mille suurus edastatakse 32-bitise numbrina, ja seej\u00e4rel kirjutatakse sinna tegeliku suurusega andmeid, mis viib \u00fcleolekule, kui puhvri tegelik suurus oli \u00fcle 4GB. M\u00f5lemaid vigu saab p\u00f5hjustada ainult root v\u00f5i kasutaja, kellele on selgelt antud \u00f5igused haavatavatele toimingutele. Kolmas viga on k\u00f5igile kergesti \u00e4rakasutatav; see v\u00f5imaldab kellegil seada andmestikule lipu &#171;$hasrecvd&#187; ZFS_IOC_SET_PROP abil (kui ohtlik see on, pole teada). <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:41.libalias.asc\">CVE-2026-49420<\/a>. Korrektsete paketi suuruse kontrolli puudumine enne selle kirjutamist fikseeritud suurusega puhvri sisse stegis libalias-modulis RTSP toetuseks loob v\u00f5imaluse kaugtaseme volitusteta kuhjata steki v\u00f5i tuuma (ipfw nat) v\u00f5i protsessi natd (mis tavaliselt t\u00f6\u00f6tab root'i all). See v\u00f5ib potentsiaalselt viia RCE-ni. Haavatavust v\u00f5ib esile kutsuda pahatahtlik host lokaalses v\u00f5rgus NAT-iga, mis on rakendatud l\u00e4bi libalias, edastades pahatahtlikke RTSP-pakette. Seega ei m\u00f5juta haavatavus hoste, millel NAT ei t\u00f6\u00f6ta mingil kujul. Samuti: natd l\u00f5petab haavatavuse, kui eemaldada rida libalias_smedia.so failist \/etc\/libalias.conf ja taask\u00e4ivitada natd, ning ipfw nat ei ole haavatav ilma alias_smedia.ko mooduli laadimiseta (seal ei ole \u00f6eldud, kas ta saab selle automaatselt laadida). Samuti vaatab haavatav t\u00f6\u00f6tleja ainult TCP\/UDP pakette, mis l\u00e4hevad v\u00e4ljapoole, mille \u00fcheks sadamaks on 554 v\u00f5i 7070 \u2014 kui sellised paketid tulevad enne NAT-i j\u00f5udmist tulem\u00fc\u00fcriga blokeerida, kaob haavatavus samuti. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:42.unlinkat.asc\">CVE-2026-49421<\/a>. unlinkat() ja funlinkat() ei arvesse v\u00f5tnud lippu AT_RESOLVE_BENEATH, mis oleks pidanud keelama antud tee l\u00e4bimisel suunduda \u00fcle dirfd argumendi poolt n\u00e4idatud katalooge. Seega lubati failide kustutamine kataloogist v\u00e4ljaspool, kui kutsuv kood soovis selle piirm\u00e4\u00e4ra kehtestada. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:43.tcp.asc\">CVE-2026-49422<\/a>. tcp_rack.ko moodulis esinev v\u00f5istlus. (vaikimisi ei ole see laaditud). Igal tcp-soketil on v\u00f5imalik eraldi valida tcp-stek, mille kaudu see t\u00f6\u00f6tab, sealhulgas neid reaalajas vahetada. Kui teha nii: 1) soketil, millel on tcp_rack, kutsume esile rack-spetsiifilise setsockopt(), 2) teises l\u00f5imes \u00f5nnestub meil kiiresti vahetada tcp-stek rack-ilt teisele ja siis veel kord rack-ile tagasi vahetada \u00f5igel hetkel, siis rack- t\u00f6\u00f6tleja setsockopt() t\u00f6\u00f6tab vanal (enne vahetust) soketi oleku struktuuri aadressil, mis p\u00f5hjustab m\u00e4lu kahjustamist ja v\u00f5imaliku privileegide t\u00f5stmise. See on v\u00f5imalik ainult s\u00fcsteemides, kus tcp_rack.ko on selgelt laaditud, see ei ole vaikimisi.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:44.posixshm.asc\">CVE-2026-49427, CVE-2026-49428<\/a>. POSIX largepages (shm_create_largepage) ei tuhande allocateerimisel olnud piisavalt t\u00e4pselt t\u00e4histatud kui kasutuses, mis v\u00f5is viia nende vale vabastamiseni erinevates olukordades (mainitud on kutsed sendfile koos lipuga SF_NOCACHE, open koos lipuga O_TRUNC ja fspacectl) ning hilisema use-after-free tavaliste tagaj\u00e4rgedega.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:45.audit.asc\">CVE-2026-49426<\/a>. Vigased audit(4) logid eemalsetest s\u00fcsteemik\u00f5nedest l\u00e4bi ptrace(PT_SC_REMOTE). Need v\u00f5ivad segadusse ajada kahtlaste olukordade anal\u00fc\u00fcsi s\u00fcsteeme, kui neid kasutatakse.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:46.ktls.asc\">CVE-2026-49423<\/a>. V\u00f5imalik kernel-paanik andmete vastuv\u00f5tmisel l\u00e4bi kTLS koos TLS 1.2 CBC-salvestustega. Probleemi v\u00e4ltimiseks saab seadistada kern.ipc.tls.enable=0 v\u00f5i kern.ipc.tls.cbc_enable=0.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:47.linux.asc\">CVE-2026-49424<\/a>. Andmeleke (104 baiti) kernel'i t\u00fckist kutses linux-compat waitid(), mis unustab nullida mittet\u00e4idetud osa linux-struktuurist siginfo_t, kui andmed kantakse sellest freebsd-isse. Tavalistes GENERIC kernelites on linux-emulaator vaikimisi v\u00e4lja l\u00fclitatud ning aktiveeritakse ainult k\u00e4sitsi mooduli laadimisega.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:48.compat32.asc\">CVE-2026-49425<\/a>. Sarnaselt eelnevale ei nullita 32-bitine kevent enne andmete edastamist 64-bitise struktuuri, mis toob kaasa andmete leke virnast. 32-bitine \u00fchilduvus on vaikimisi tuumas sisse l\u00fclitatud (mitte moodulina).<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:49.iconv.asc\">CVE-2026-58081, CVE-2026-58082<\/a>. Vulnerabiliteter iconv-is. Esimene: paljud selle moodulid ei kontrolli kutsuva koodi poolt esitatud v\u00e4ljundpuhvri suurust enne, kui kirjutavad sinna tulemuse (mainitud HZ, UTF-7, VIQR, ZW). Teine: ISO-2022 moodul kasutab virnas 6-baidilist puhverdamist sisemiste toimingute jaoks, kuid sinna v\u00f5ib kirjutada kuni 10 baidi, rikkudes virna. Seet\u00f5ttu v\u00f5ivad iconv-i k\u00e4ivitamine \u00fchte v\u00f5i teise nimetatud kodeeringusse, kasutades kontrollimata sisendeid, p\u00f5hjustada puhvri \u00fclevoolu. <\/li>\n<\/ul>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18335229\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421 FreeBSD. CVE-2026-49418. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 memory-mapped \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043c\u043e\u0436\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c double-free\/use-after-free \u0432 \u044f\u0434\u0440\u0435. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. CVE-2026-49419. (\u0442\u043e\u043b\u044c\u043a\u043e FreeBSD 15+) \u0414\u0432\u043e\u0439\u043d\u043e\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0435\u043d\u0438\u0435 refcount \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e jail-\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 jail \u043f\u043e jail [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182553","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421 FreeBSD. CVE-2026-49418. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 memory-mapped \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043c\u043e\u0436\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c double-free\/use-after-free \u0432 \u044f\u0434\u0440\u0435. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. CVE-2026-49419. (\u0442\u043e\u043b\u044c\u043a\u043e FreeBSD 15+) \u0414\u0432\u043e\u0439\u043d\u043e\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0435\u043d\u0438\u0435 refcount \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e jail-\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 jail \u043f\u043e jail\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Emin Berklin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeBSD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421 FreeBSD. CVE-2026-49418. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 memory-mapped \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043c\u043e\u0436\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c double-free\/use-after-free \u0432 \u044f\u0434\u0440\u0435. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. CVE-2026-49419. (\u0442\u043e\u043b\u044c\u043a\u043e FreeBSD 15+) \u0414\u0432\u043e\u0439\u043d\u043e\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0435\u043d\u0438\u0435 refcount \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e jail-\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 jail \u043f\u043e jail\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-08T20:53:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-08T20:53:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uued FreeBSD haavatavused | ProHoster","description":"30. juunil 2026 avalikustati teatiseid 13 uue haavatavuse kohta FreeBSD operatsioonis\u00fcsteemis. CVE-2026-49418. Seade, millel on m\u00e4lu kaardistamise liides, v\u00f5ib korraldada double-free\/use-after-free tuumas. T\u00f5en\u00e4oliselt v\u00f5ib see p\u00f5hjustada privileegide t\u00f5usu. CVE-2026-49419. (ainult FreeBSD 15+) Juhuslik refcounti kaheksast v\u00e4henemist praeguse jail-i puhul, kui t\u00f5rge juhtub teise jail-i p\u00f6\u00f6rdumise k\u00e4itlemisel.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeBSD | ProHoster","og:description":"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421 FreeBSD. CVE-2026-49418. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 memory-mapped \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043c\u043e\u0436\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c double-free\/use-after-free \u0432 \u044f\u0434\u0440\u0435. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. CVE-2026-49419. (\u0442\u043e\u043b\u044c\u043a\u043e FreeBSD 15+) \u0414\u0432\u043e\u0439\u043d\u043e\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0435\u043d\u0438\u0435 refcount \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e jail-\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 jail \u043f\u043e jail","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-08T20:53:54+00:00","article:modified_time":"2026-07-08T20:53:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182553","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182553"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182553\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182553"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182553"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182553"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}