{"id":99696,"date":"2021-04-10T10:23:07","date_gmt":"2021-04-10T08:23:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-freebsd-perevyol-port-arm64-v-chislo-pervichnyh-i-ispravil-tri-uyazvimosti"},"modified":"2021-04-10T10:23:07","modified_gmt":"2021-04-10T08:23:07","slug":"proekt-freebsd-perevyol-port-arm64-v-chislo-pervichnyh-i-ispravil-tri-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/proekt-freebsd-perevyol-port-arm64-v-chislo-pervichnyh-i-ispravil-tri-uyazvimosti","title":{"rendered":"A FreeBSD projekt az ARM64 portot els\u0151dleges st\u00e1tuszba emelte \u00e9s h\u00e1rom s\u00e9r\u00fcl\u00e9kenys\u00e9get jav\u00edtott.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A FreeBSD fejleszt\u0151i \u00fagy hat\u00e1roztak, hogy az \u00faj FreeBSD 13 \u00e1gban, amelynek kiad\u00e1s\u00e1ra \u00e1prilis 13-\u00e1n ker\u00fcl sor, az ARM64 (AArch64) architekt\u00fara portj\u00e1t els\u0151dleges platform st\u00e1tuszra (Tier 1) emelik. Kor\u00e1bban ez a t\u00e1mogat\u00e1si szint a 64 bites x86 rendszerekre vonatkozott (eddig els\u0151dleges volt az i386 architekt\u00fara is, de janu\u00e1rban ez m\u00e1sodlagos t\u00e1mogat\u00e1si szintre ker\u00fclt). <\/p>\n
Az els\u0151dleges t\u00e1mogat\u00e1si szint mag\u00e1ban foglalja a telep\u00edt\u0151csomagok, bin\u00e1ris friss\u00edt\u00e9sek \u00e9s k\u00e9sz csomagok elk\u00e9sz\u00edt\u00e9s\u00e9t, valamint bizonyos probl\u00e9m\u00e1k specifikus megold\u00e1sainak garant\u00e1l\u00e1s\u00e1t \u00e9s az ABI \u00e9ps\u00e9g\u00e9nek meg\u0151rz\u00e9s\u00e9t a felhaszn\u00e1l\u00f3i k\u00f6rnyezet \u00e9s a kernel sz\u00e1m\u00e1ra (kiv\u00e9ve n\u00e9h\u00e1ny alrendszert). Az els\u0151dleges t\u00e1mogat\u00e1s olyan csapatok \u00e1ltal biztos\u00edtott, amelyek a sebezhet\u0151s\u00e9gek kijav\u00edt\u00e1s\u00e1\u00e9rt, a kiad\u00e1sok el\u0151k\u00e9sz\u00edt\u00e9s\u00e9\u00e9rt \u00e9s a portok karbantart\u00e1s\u00e1\u00e9rt felel\u0151sek. <\/p>\n
Tov\u00e1bb\u00e1 megjegyezhet\u0151, hogy a FreeBSD h\u00e1rom sebezhet\u0151s\u00e9ge is kijav\u00edt\u00e1sra ker\u00fclt: <\/p>\n
\n
CVE-2021-29626 \u2014 a privileged local process can read the contents of kernel memory or other processes by manipulating memory page mappings. This vulnerability is caused by an error in the virtual memory subsystem that provides shared memory between processes, which led to continued binding of memory to the process after the associated memory page was freed.\n
CVE-2021-29627 \u2014 an unprivileged local user can escalate their privileges in the system or read the contents of kernel memory. The issue is caused by accessing memory after it has been freed (use-after-free) in the implementation of the accept filter mechanism.\n
CVE-2020-25584 \u2014 the possibility of bypassing the Jail isolation mechanism. A user within an isolated environment who has the right to mount partitions (allow.mount) can achieve a change of the root directory to a position outside the Jail hierarchy and gain full read and write access to all system files. <\/ul>\n