{"id":181730,"date":"2026-05-25T20:48:13","date_gmt":"2026-05-25T18:48:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/7-novyh-uyazvimostej-v-freebsd"},"modified":"2026-05-25T20:48:13","modified_gmt":"2026-05-25T18:48:14","slug":"7-novyh-uyazvimostej-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","title":{"rendered":"7 novih ranljivosti v FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

20. maja 2026. godine, programeri FreeBSD-a objavili su ispravljanje sedam novih ranjivosti u sistemu. Nisu sve podjednako opasne, ali postoje i vrlo neugodna.
\n<\/p>\n

<\/p>\n

CVE-2026-45251<\/a> — use-after-free v select-podobnyh syscalls, \u010de je v njihovi \u010dakalni vrsti seznam procesnih descriptorjev (v FreeBSD 15 — \u0161e novi deskriptorji jail-ov), in ti deskriptorji so bili zaprti v drugem niti, medtem ko je \u010dakalni syscall \u0161e vedno \u010dakal. Sode\u010d po ovom commit-u<\/a>, tako\u0111e su pogo\u0111eni deskriptori povezani s netmap-om (drajverom za ubrzan direktan pristup mre\u017enoj kartici), ali o tome nema zvani\u010dnih informacija. Deskriptori procesa su se pojavili u FreeBSD 9, pa ranjivost verovatno postoji od tada. U zvani\u010dnom saop\u0161tenju navedeno je da ranjivost omogu\u0107ava sticanje privilegija superkorisnika. Nema mogu\u0107nosti da se ona neutralizuje bez patch-a\/akutalizacije.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45250<\/a> — napa\u010den izra\u010dun velikosti predpomnilnika in posledi\u010dno pisanje mimo predpomnilnika v temeljnem sistemskem klicu setcred, pri \u010demer, \u010deprav setcred sam zahteva root pravice, pride do pokvaritve sklada, preden so pravice preverjene in so tako na voljo vsem. Ta sistemski klic je bil v FreeBSD 14.3 (torej starej\u0161e verzije niso prizadete) in omogo\u010da nastavitev vseh identifikatorjev uporabnika in skupin trenutnega procesa v 1 klicu, namesto kombinacij setuid+setgid+setgroups in podobno. Ranljivost omogo\u010da izvajanje zlonamerne kode v kontekstu jedra. Mo\u017enosti za nevtralizacijo brez popravka\/updatie ne obstajajo.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45252<\/a> — pomanjkanje preverjanja prisotnosti zaklju\u010dnega nula pred kopiranjem niza, pridobljenega od fuse-demon, v nov predpomnilnik. Kljub temu pa je preverjanje najve\u010dje velikosti kopiranja tam prisotno, in ve\u010d kot 253 dodatnih bajtov iz jedrne pomnilnika ni mogo\u010de prebrati. Poleg tega lahko zapi\u0161ete do 250 bajtov v «unallocated kernel heap space». Privzeto je v freebsd prepovedano name\u0161\u010danje datote\u010dnih sistemov brez pravic root uporabnikom, kar pomeni, da je za vnos zlonamernega fuse-demon v jedro potreben root. Vendar, \u010de je sysctl vfs.usermount=1 — sistem postane ranljiv tudi za obi\u010dajne uporabnike. Tudi tveganje fuse-demona v jail-u, kjer je lahko tudi root (vendar je to privzeto prav tako prepovedano), je treba upo\u0161tevati.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45253<\/a> — pri uporabi ptrace je bila mo\u017enost zagnati v razre\u0161enem procesu sistemski klic z nepravilno \u0161tevilko, kar je vodilo do izvajanja v jedru kode, ki ni bila predvidena za zagon kot sistemski klic, s potencialno slabimi posledicami. \u010ce je nastavljena security.bsd.unprivileged_proc_debug=0 (kar je dobra praksa za stre\u017enike v vsakem primeru, sistemski namestnik pa celo predlaga, da to stori kot opcijo), uporabni\u0161ki in jailani procesi ne bodo mogli uporabljati ptrace in tako bo ranljivost ostala dostopna le root-u.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45255<\/a> — shell command injection with root privileges in bsdinstall\/bsdconfig through the names of malicious wireless networks that weren\u2019t escaped when viewing their list. To avoid encountering this vulnerability, simply refrain from viewing the wireless networks list in bsdinstall\/bsdconfig.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-39461<\/a>, CVE-2026-45254<\/a> — vulnerabilities in the libcasper library (not in the kernel). The library is designed for the secure configurable provision of services to processes placed in a sandbox. One of the vulnerabilities is related to a stack buffer overflow, leading to stack corruption by organizing file descriptors with large numbers in this library (it was intended for numbers up to 1024 \u2014 the default limit for select system calls). The second vulnerability \u2014 the ability to remove imposed constraint lists (the library's ideology is that once limitations are imposed on a process, they can only be strengthened) cap_net.<\/p>\n

<\/noindex><\/p>\n

The fixed system versions are numbered: 14.3-RELEASE-p14, 14.4-RELEASE-p5, and 15.0-RELEASE-p9. It is also important to note for some: the FreeBSD 13.5 release was recently end-of-lifed \u2014 on April 30, 2026, and there are no official patches for it (or for the entire 13.x branch). However, if for some reason you\u2019re not in a hurry to transition to the 14.x release, patches for version 14.3 are generally compatible with the source code of 13.5, and CVE-2026-45250 for the 13.x branch is irrelevant due to the absence of setcred() in it.<\/p>\n

<\/noindex><\/p>\n

Izvor: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435. CVE-2026-45251 — use-after-free \u0432 select-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u043a\u043e\u043b\u043b\u0430\u0445, \u0435\u0441\u043b\u0438 \u0432 \u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u0432 FreeBSD 15 — \u0435\u0449\u0451 \u043d\u043e\u0432\u044b\u0435 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b jail-\u043e\u0432), \u0438 \u044d\u0442\u0438 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043f\u043e\u0442\u043e\u043a\u0435 \u043f\u043e\u043a\u0430 \u043e\u0436\u0438\u0434\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u043a\u043e\u043b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181730","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd477 novih ranljivosti v FreeBSD | ProHoster","description":"20. maja 2026. godine, programeri FreeBSD-a objavili su ispravljanje sedam novih ranjivosti u sistemu. Nisu sve podjednako opasne, ali postoje i vrlo neugodna.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FreeBSD | ProHoster","og:description":"20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-25T18:48:14+00:00","article:modified_time":"2026-05-25T18:48:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/181730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=181730"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/181730\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=181730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=181730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=181730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}