Rashin lahani a cikin FreeBSD

Na FreeBSD bayyana yawancin raunin da aka gyara a cikin sabuntawa 12.1-SAKI-p8, 11.4-SAKI-p2 da 11.3-SAKI-p12:

• CVE-2020-7460 - haɓaka gata a cikin tsarin ta hanyar
  magudin kiran 32-bit sendmsg akan tsarin 64-bit. Matsalar ba ta shafar tsarin 32-bit da tsarin tare da kernel da aka gina ba tare da zaɓi na COMPAT_FREEBSD32 (wanda aka kunna ta tsohuwa a cikin kernels na GENERIC).

• CVE-2020-7459 - Rashin ingantaccen bincike don girman bayanan da aka kwafi zuwa buffer a cikin smsc direbobi na Ethernet smsc (SMSC/Microchip), muge (Microchip) da cdceem (USB Communication Device Class) yana bawa maharin damar aiwatar da lamba a matakin kernel ko a ciki. sarari mai amfani ta hanyar haɗa na'urar USB mara kyau zuwa na'urorin tsarin. Don yin amfani da raunin rauni, dole ne ku sami damar yin amfani da kayan aiki ta zahiri da kuma ikon kunna hanyar sadarwa ta hanyar sadarwa.
• Sauti rashin lahani a cikin SQLite da aka gyara a cikin SQLite 3.32.1 da 3.32.2 sakewa wanda zai iya haifar da faduwa ko lalata bayanai:
  CVE-2020-11655,
  CVE-2020-11656,
  CVE-2020-13434,
  CVE-2020-13435,
  CVE-2020-13630,
  CVE-2020-13631,
  CVE-2020-13632.

source: budenet.ru