Zowopsa mu FreeBSD

Pa FreeBSD kuwululidwa zofooka zingapo zomwe zimakhazikika pazosintha 12.1-RELEASE-p8, 11.4-RELEASE-p2 ndi 11.3-RELEASE-p12:

  • CVE-2020-7460 - kuonjezera mwayi mu dongosolo kudzera
    kusintha kwa 32-bit sendmsg kuyimba pa 64-bit system. Vuto silimakhudza machitidwe ndi machitidwe a 32-bit omwe ali ndi kernel yomangidwa popanda njira ya COMPAT_FREEBSD32 (yothandizidwa mwachisawawa mumagulu a GENERIC).

  • CVE-2020-7459 - kusowa kwa macheke oyenera a kukula kwa data yomwe idakopedwa ku buffer mu Ethernet madalaivala smsc (SMSC/Microchip), muge (Microchip) ndi cdceem (USB Communication Device Class) imalola wowukira kuti apereke code pamlingo wa kernel kapena malo ogwiritsa ntchito polumikiza chipangizo choyipa cha USB ku zida zamakina. Kuti mugwiritse ntchito chiwopsezocho, muyenera kukhala ndi mwayi wogwiritsa ntchito zida ndi kuthekera koyambitsa mawonekedwe a netiweki.
  • Mndandanda zofooka mu SQLite zokhazikika mu SQLite 3.32.1 ndi 3.32.2 zotulutsidwa zomwe zingayambitse kuwonongeka kapena kuwonongeka kwa data:
    CVE-2020-11655,
    CVE-2020-11656,
    CVE-2020-13434,
    CVE-2020-13435,
    CVE-2020-13630,
    CVE-2020-13631,
    CVE-2020-13632.

Source: opennet.ru

Kuwonjezera ndemanga