Zowopsa zitatu zokhazikika mu FreeBSD

FreeBSD imayankhira zovuta zitatu zomwe zitha kuloleza kugwiritsa ntchito ma code mukamagwiritsa ntchito libfetch, IPsec packet retransmission, kapena kupeza data ya kernel. Mavuto amakonzedwa muzosintha 12.1-RELEASE-p2, 12.0-RELEASE-p13 ndi 11.3-RELEASE-p6.

  • CVE-2020-7450 - chosungira chikusefukira mu laibulale ya libfetch, yomwe imagwiritsidwa ntchito kutsitsa mafayilo mu lamulo lolanda, woyang'anira phukusi la pkg ndi zida zina. Chiwopsezocho chikhoza kuyambitsa kukhazikitsidwa kwa ma code pokonza ulalo wopangidwa mwapadera. Kuwukirako kutha kuchitika mukalowa patsamba lomwe limayendetsedwa ndi wowukirayo, yemwe, kudzera pa HTTP yolozeranso, amatha kuyambitsa kukonza ulalo woyipa;
  • CVE-2019-15875 - Chiwopsezo cha njira yopangira zinyalala zapakati. Chifukwa cha cholakwika, mpaka ma byte 20 a data kuchokera pa kernel stack adajambulidwa m'madayi apakatikati, omwe atha kukhala ndi zinsinsi zokonzedwa ndi kernel. Monga njira yodzitetezera, mutha kuletsa kupanga mafayilo oyambira kudzera pa sysctl kern.coredump=0;
  • CVE-2019-5613 - cholakwika mu code yoletsa kutumizanso kwa data ku IPsec kunapangitsa kuti zitheke kutumizanso mapaketi omwe adagwidwa kale. Malingana ndi protocol yapamwamba yomwe imafalitsidwa pa IPsec, vuto lodziwika limalola, mwachitsanzo, malamulo omwe adatumizidwa kale kuti akwiyidwe.

Source: opennet.ru

Kuwonjezera ndemanga