Iyo FreeBSD purojekiti yakaita iyo ARM64 chiteshi chiteshi chekutanga uye yakagadzirisa kusakwana katatu

Vagadziri veFreeBSD vakasarudza mubazi idzva reFreeBSD 13, iro rinotarisirwa kuburitswa muna Kubvumbi 13, kupa chiteshi cheiyo ARM64 architecture (AArch64) chinzvimbo chepuratifomu yekutanga (Tier 1). Kare, nhanho yakafanana yerutsigiro yakapihwa 64-bit x86 masisitimu (kusvika nguva pfupi yadarika, iyo i386 architecture ndiyo yaive yekutanga kuvaka, asi muna Ndira yakaendeswa kune yechipiri nhanho yerutsigiro).

Iyo yekutanga nhanho yerutsigiro inosanganisira kugadzirwa kwekumisikidza magungano, mabhinari anogadziridza uye akagadzirira-akagadzirwa mapakeji, pamwe nekupa zvivimbiso zvekugadzirisa matambudziko chaiwo uye kuchengetedza iyo isina kuchinjika ABI yenzvimbo yemushandisi uye kernel (kunze kwemamwe ma subsystems). Yekutanga nhanho inowira pasi perutsigiro rwezvikwata zvine chekuita nekubvisa kusagadzikana, kugadzirira kuburitswa uye kuchengetedza madoko.

Pamusoro pezvo, isu tinogona kucherechedza kubviswa kwehutatu hwekusagadzikana muFreeBSD:

  • CVE-2021-29626 Iyo isina kurongeka yemuno maitiro inogona kuverenga zviri mukati mekernel memory kana mamwe maitiro kuburikidza nemepu peji yemepu manipulation. Kusagadzikana kunokonzerwa nebug mune chaiyo memory subsystem iyo inobvumira ndangariro kugovaniswa pakati pematanho, izvo zvinogona kukonzera ndangariro kuti ienderere mberi kusungirirwa kumuitiro mushure mekunge peji rekurangarira rasunungurwa.
  • CVE-2021-29627 Mushandisi asina rusarura wemuno anogona kuwedzera maropafadzo avo pane system kana kuverenga zviri mukati mekernel memory. Dambudziko rinokonzerwa nekuwana ndangariro mushure mekunge yasunungurwa (kushandisa-mushure-yemahara) mukuitwa kweiyo yekugamuchira sefa michina.
  • CVE-2020-25584 -Kugona kwekupfuura iyo Jail yekuzviparadzanisa nzira. Mushandisi ari mukati mebhokisi rejecha ane mvumo yekuisa zvikamu (allow.mount) anogona kushandura dhairekitori remidzi kune chinzvimbo kunze kweiyo Jail hierarchy uye kuwana yakazara kuverenga nekunyora kuwana kune ese system mafaira.

Source: opennet.ru

Voeg