{"id":182553,"date":"2026-07-08T22:53:54","date_gmt":"2026-07-08T20:53:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/novye-uyazvimosti-freebsd"},"modified":"2026-07-08T22:53:54","modified_gmt":"2026-07-08T20:53:54","slug":"novye-uyazvimosti-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/novye-uyazvimosti-freebsd","title":{"rendered":"Nove ranljivosti FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex>          <a rel=\"nofollow\" id=\"memories_button\" href=\"#\" title=\"Pra\u0107enje\"><i class=\"icon-bell\"><\/i><\/a><br \/>2                            <\/p>\n<p>30. junija 2026 so bila objavljena obvestila o popravku 13 novih ranljivosti v operacijskem sistemu FreeBSD.<\/p>\n<ul>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:37.vm.asc\">CVE-2026-49418<\/a>. Uporabnik z dostopom do naprave, ki ima memory-mapped vmesnik, lahko organizira double-free\/use-after-free v jedru. To bi lahko potencialno vodilo do povi\u0161anja privilegijev. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:38.jail.asc\">CVE-2026-49419<\/a>. (samo FreeBSD 15+) Dvojno zmanj\u0161anje refcount trenutnega jail-a pri obdelavi napake pri dostopu do drugega jail-a po jail descriptor-ju (pojavil se je v FreeBSD 15), kar posledi\u010dno vodi do nepri\u010dakovanega osvoboditve nadzorne strukture jail-a in subsequent use-after-free kjerkoli jo uporabljamo. Teoreti\u010dno lahko vodi do povi\u0161anja privilegijev. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:39.execve.asc\">CVE-2026-49415<\/a>. Pri izvajanju setuid programa se pravice dostopa do njegovega pomnilnika nastavljajo malce kasneje, kot se ta pomnilnik inicializira, kar omogo\u010da v kratkem \u010dasu dostop do njega in njegovo urejanje brez potrebnih privilegijev preko procfs ali linprocfs. Ve\u010dina sistemov procfs, \u0161e posebej libprocfs, ni montiranih, zato ta te\u017eava verjetno redko koga prizadene. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:40.zfs.asc\">CVE-2026-49429, CVE-2026-49430, CVE-2026-49431<\/a>. (samo za sisteme s ZFS) Prve dve gre\u0161ke su povezane sa dodeljivanjem memorije neodgovaraju\u0107e veli\u010dine: dodeljuje se bafer veli\u010dine prosle\u0111enog u 32-bitnom broju, a zatim se u njega upisuju podaci stvarne veli\u010dine, \u0161to dovodi do prelivanja, ako je stvarna veli\u010dina bafera ve\u0107a od 4GB. Obje gre\u0161ke mogu izazvati samo root ili korisnik sa jasno dodeljenim privilegijama za ranjive operacije. Tre\u0107a gre\u0161ka je dostupna za eksploataciju svima, omogu\u0107ava bilo kome da postavi oznaku &#171;$hasrecvd&#187; na dataset pomo\u0107u ZFS_IOC_SET_PROP (koliko je to opasno, iz najave nije jasno). <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:41.libalias.asc\">CVE-2026-49420<\/a>. Nedostatak adekvatne provere veli\u010dine paketa pre njegove zapisivanja u bafer fiksne veli\u010dine na steku u libalias modulu podr\u0161ke za RTSP dovodi do mogu\u0107nosti udaljenog i bez autorizacije preljevanja steka ili jezgra (za ipfw nat) ili procesa natd (koji se obi\u010dno pokre\u0107e kao root). Potencijalno mo\u017ee dovesti do RCE. Ranjivost mo\u017ee izazvati zlonameran host unutar lokalne mre\u017ee iza NAT-a, realizovanog putem libalias, koji prosle\u0111uje maliciozne RTSP pakete. Shodno tome, ranjivost ne poga\u0111a hostove na kojima nije pokrenut NAT u bilo kojem obliku. Tako\u0111e, natd ne\u0107e biti ranjiv ako se ukloni linija libalias_smedia.so iz \/etc\/libalias.conf i ponovo pokrene natd, a ipfw nat ne\u0107e biti ranjiv bez u\u010ditavanja modula alias_smedia.ko (nije navedeno mo\u017ee li ga automatski u\u010ditati). Tako\u0111e, ranjivi procesor obra\u0111uje samo TCP\/UDP pakete koji idu napolje, a koji imaju jedan od portova 554 ili 7070 \u2014 ako se ovakvi paketi za\u0161tite firewall-om pre nego \u0161to dospeju u NAT, ranjivost \u0107e tako\u0111e nestati. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:42.unlinkat.asc\">CVE-2026-49421<\/a>. unlinkat() in funlinkat() nista upo\u0161tevala oznake AT_RESOLVE_BENEATH, ki bi morala prepre\u010diti izhod iz dolo\u010dene mape, navedene v argumentu dirfd. Tako je bilo mo\u017eno brisati datoteke zunaj omenjene mape, ko je klicna koda \u017eelela to omejitev uvesti. <\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:43.tcp.asc\">CVE-2026-49422<\/a>. Tekma v modulu tcp_rack.ko (privzeto ni nalo\u017een). Vsak tcp-sokanec lahko individualno izbere tcp-stek, preko katerega bo deloval, vklju\u010dno s preklapljanjem na let. \u010ce to storimo: 1) na soketu s tcp_rack kli\u010demo rack-specifi\u010den setsockopt(), 2) v drugem niti hitro preklopimo tcp-stek iz rack nazaj na drug in \u0161e enkrat preklopimo nazaj na rack ob pravem \u010dasu, bo rack-obdelovalec setsockopt() deloval z starim (pred preklopom) naslovom strukture stanja soketa, kar privede do po\u0161kodb pomnilnika in mo\u017enemu dvigu privilegijev. Ugotovljeni so bili samo sistemi, kjer je bil tcp_rack.ko izrecno nalo\u017een, to ni privzeto.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:44.posixshm.asc\">CVE-2026-49427, CVE-2026-49428<\/a>. POSIX largepages (shm_create_largepage) pri alokaciji niso bile dovolj natan\u010dno ozna\u010dene kot uporabljene, kar je lahko vodilo do njihove napa\u010dne osvoboditve v razli\u010dnih okoli\u0161\u010dinah (omenjeni so klici sendfile s oznako SF_NOCACHE, open z oznako O_TRUNC in fspacectl) in posledi\u010dnem use-after-free s obi\u010dajnimi posledicami.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:45.audit.asc\">CVE-2026-49426<\/a>. Napa\u010dne avtorizacije audit(4) o oddaljenih sistemskih klicih prek ptrace(PT_SC_REMOTE). Lahko zmedejo sisteme za analizo sumljivih situacij, \u010de se ti uporabljajo.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:46.ktls.asc\">CVE-2026-49423<\/a>. Mo\u017een kernel-panic pri prejemanju podatkov prek kTLS z vklju\u010ditvijo TLS 1.2 CBC zapisov. Da bi se izognili te\u017eavi, lahko nastavite kern.ipc.tls.enable=0 ali kern.ipc.tls.cbc_enable=0.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:47.linux.asc\">CVE-2026-49424<\/a>. Pu\u0161\u010danje podatkov (104 bajta) iz sklada jedra pri klicu linux-compat waitid(), ki pozabi resetirati neuporabljen del linux strukture siginfo_t pri prenosu podatkov iz freebsd-jske. V obi\u010dajnih GENERIC jedrih je linux emulator privzeto izklju\u010den in se vklopi le s ro\u010dnim nalaganjem modula.<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:48.compat32.asc\">CVE-2026-49425<\/a>. Podobno kot prej, 32-bitni kevent pozabi resetirati 32-bitno strukturo pred prenosom podatkov iz 64-bitne nativne, kar povzro\u010di pu\u0161\u010danje podatkov iz sklada. Privzeto je 32-bitna zdru\u017eljivost v jedru vklju\u010dena (ne kot modul).<\/li>\n<li> <a rel=\"nofollow\" href=\"https:\/\/www.freebsd.org\/security\/advisories\/FreeBSD-SA-26:49.iconv.asc\">CVE-2026-58081, CVE-2026-58082<\/a>. Ranljivosti v iconv. Prva: mnogi njegovi moduli ne preverjajo velikosti izhodnega pomnilni\u0161kega prostora, ki ga zagotavlja klicna koda, preden vanj zapi\u0161ejo rezultat (omenjeni HZ, UTF-7, VIQR, ZW). Druga: modul ISO-2022 uporablja 6-bajtni pomnilnik na skladu za notranje operacije, vendar vanj lahko zapi\u0161e do 10 bajtov, kar pokvari sklad. Tako je zagon iconv za konverzijo v ali iz enega od navedenih kodiranj z nepreverjenimi podatki lahko izpostavljen napakam prelivanja pomnilnika. <\/li>\n<\/ul>\n<p>Izvor: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18335229\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421 FreeBSD. CVE-2026-49418. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 memory-mapped \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043c\u043e\u0436\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c double-free\/use-after-free \u0432 \u044f\u0434\u0440\u0435. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. CVE-2026-49419. (\u0442\u043e\u043b\u044c\u043a\u043e FreeBSD 15+) \u0414\u0432\u043e\u0439\u043d\u043e\u0435 \u0443\u043c\u0435\u043d\u044c\u0448\u0435\u043d\u0438\u0435 refcount \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e jail-\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0434\u0440\u0443\u0433\u043e\u043c\u0443 jail \u043f\u043e jail [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":9,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182553","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Emin Berklin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/news\/novye-uyazvimosti-freebsd\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeBSD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/news\/novye-uyazvimosti-freebsd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-08T20:53:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-08T20:53:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nove ranljivosti FreeBSD | ProHoster","description":"2 30. junij 2026 so bile objavljene obvestila o popravku 13 novih ranljivosti v operacijskem sistemu.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/novye-uyazvimosti-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FreeBSD | ProHoster","og:description":"2 30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 13 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u041e\u0421.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/novye-uyazvimosti-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-08T20:53:54+00:00","article:modified_time":"2026-07-08T20:53:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182553","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:06","updated":"2026-08-05 12:22:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/182553","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=182553"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/182553\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=182553"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=182553"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=182553"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}