{"id":181730,"date":"2026-05-25T20:48:13","date_gmt":"2026-05-25T18:48:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/7-novyh-uyazvimostej-v-freebsd"},"modified":"2026-05-25T20:48:13","modified_gmt":"2026-05-25T18:48:14","slug":"7-novyh-uyazvimostej-v-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","title":{"rendered":"7 vulnerabilitete t\u00eb reja n\u00eb FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

M\u00eb 20 maj 2026, zhvilluesit e FreeBSD njoftuan korrigjimin e shtat\u00eb cenueshm\u00ebrive t\u00eb reja n\u00eb sistem. Jo t\u00eb gjitha jan\u00eb nj\u00ebsoj t\u00eb rrezikshme, por disa jan\u00eb ve\u00e7an\u00ebrisht problematike.
\n<\/p>\n

<\/p>\n

CVE-2026-45251<\/a> — use-after-free n\u00eb sistemet e ngjashme me select, n\u00ebse n\u00eb list\u00ebn e pritjes jan\u00eb t\u00eb pranishme deshifrues procesesh (n\u00eb FreeBSD 15  — ende deshifrues t\u00eb rinj p\u00ebr jail), dhe k\u00ebta deshifrues jan\u00eb mbyllur n\u00eb nj\u00eb thread tjet\u00ebr nd\u00ebrsa syscall-i q\u00eb presin ende \u00ebsht\u00eb n\u00eb pritje. Duke gjykuar nga k\u00ebtij commit-i<\/a>, preken gjithashtu edhe deskriptor\u00ebt e lidhur me netmap (driver p\u00ebr qasje t\u00eb p\u00ebrshpejtuar t\u00eb drejtp\u00ebrdrejt\u00eb te p\u00ebrshtat\u00ebsi i rrjetit), por p\u00ebr k\u00ebt\u00eb nuk ka informacion zyrtar. Deskriptor\u00ebt e proceseve u shfaq\u00ebn n\u00eb FreeBSD 9, ndaj cenueshm\u00ebria ka shum\u00eb t\u00eb ngjar\u00eb t\u00eb ekzistoj\u00eb q\u00eb prej asaj kohe. N\u00eb njoftimin zyrtar thuhet se kjo cenueshm\u00ebri mund\u00ebson marrjen e privilegjeve t\u00eb superp\u00ebrdoruesit. Nuk ka m\u00ebnyr\u00eb p\u00ebr ta zbutur pa patch\/p\u00ebrdit\u00ebsim.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45250<\/a> — kalkulimi i gabuar i madh\u00ebsis\u00eb s\u00eb buffers dhe shkruan p\u00ebrtej buffers n\u00eb stack gjat\u00eb thirrjes s\u00eb sistemit setcred, megjithat\u00eb, pavar\u00ebsisht nga fakti se setcred k\u00ebrkon privilegje root, d\u00ebmtimi i stack ndodh para se privilegjet t\u00eb verifikohen dhe k\u00ebshtu \u00ebsht\u00eb i qassh\u00ebm p\u00ebr t\u00eb gjith\u00eb. Ky thirrje sistemi u shfaq n\u00eb FreeBSD 14.3 (pra, versionet m\u00eb t\u00eb hershme nuk preken) dhe ofron nj\u00eb mund\u00ebsi p\u00ebr t\u00eb vendosur t\u00eb gjitha identifikuesit e p\u00ebrdoruesve dhe grupeve t\u00eb procesit aktual me nj\u00eb thirrje, n\u00eb vend t\u00eb kombinimeve setuid+setgid+setgroups dhe t\u00eb ngjashme. Vulnerabiliteti lejon ekzekutimin e kodit t\u00eb d\u00ebmsh\u00ebm n\u00eb kontekstin e b\u00ebrtham\u00ebs. Nuk ka m\u00ebnyr\u00eb p\u00ebr ta neutralizuar pa patch\/azhim.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45252<\/a> — mungesa e kontrollit t\u00eb pranis\u00eb s\u00eb karakterit p\u00ebrfundimtar zero para se t\u00eb kopjohej nj\u00eb varg, i marr\u00eb nga demon-i fuse, n\u00eb nj\u00eb buffer t\u00eb ri. Megjithat\u00eb, ka nj\u00eb kontroll p\u00ebr madh\u00ebsin\u00eb maksimale t\u00eb kopjimit atje, dhe m\u00eb shum\u00eb se 253 bajt\u00eb t\u00eb tep\u00ebrt nga memoria e b\u00ebrtham\u00ebs nuk mund t\u00eb lexohen. Ashtu si\u00e7 \u00ebsht\u00eb e mundur t\u00eb shkruhet deri n\u00eb 250 bajt\u00eb n\u00eb «hap\u00ebsir\u00ebn e memorjes s\u00eb paklasifikuar t\u00eb b\u00ebrtham\u00ebs». P\u00ebr defolt n\u00eb freebsd, montimi i sistemeve t\u00eb skedar\u00ebve nga p\u00ebrdoruesit jo-root \u00ebsht\u00eb i ndaluar, pra p\u00ebr t\u00eb futur demon-in e d\u00ebmsh\u00ebm fuse n\u00eb b\u00ebrtham\u00eb, duhet t\u00eb jesh root. Megjithat\u00eb, n\u00ebse sysctl vfs.usermount=1  — sistemi b\u00ebhet i ndjesh\u00ebm edhe p\u00ebr p\u00ebrdoruesit e zakonsh\u00ebm. Po ashtu duhet marr\u00eb n\u00eb konsiderat\u00eb rreziku i demon-it fuse n\u00eb jail, ku mund t\u00eb jet\u00eb dhe root (por p\u00ebr defolt kjo \u00ebsht\u00eb gjithashtu e ndaluar).<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45253<\/a> — gjat\u00eb p\u00ebrdorimit t\u00eb ptrace kishte mund\u00ebsin\u00eb t\u00eb ekzekutonte nj\u00eb thirrje t\u00eb sistemit me num\u00ebr t\u00eb gabuar n\u00eb nj\u00eb proces t\u00eb debuguar, q\u00eb \u00e7onte n\u00eb ekzekutimin n\u00eb b\u00ebrtham\u00eb t\u00eb kodit, q\u00eb nuk ishte parashikuar p\u00ebr t'u ekzekutuar si thirrje sistemi, me pasoja potencialisht t\u00eb k\u00ebqija. N\u00ebse \u00ebsht\u00eb vendosur security.bsd.unprivileged_proc_debug=0 (e cila \u00ebsht\u00eb nj\u00eb praktik\u00eb e mir\u00eb p\u00ebr serverat n\u00eb \u00e7do rast, dhe instaluesi i sistemit madje e ofron k\u00ebt\u00eb si opsion), at\u00ebher\u00eb proceset e p\u00ebrdoruesve dhe t\u00eb burgosura nuk do t\u00eb mund t\u00eb p\u00ebrdorin ptrace dhe k\u00ebshtu vulnerabiliteti do t\u00eb mbetet i qassh\u00ebm vet\u00ebm p\u00ebr root-in.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-45255<\/a> — injeksioni i komandave shell me t\u00eb drejta root n\u00eb bsdinstall \/ bsdconfig p\u00ebrmes emrave t\u00eb rrjeteve t\u00eb pad\u00ebshiruara wireless, t\u00eb cilat aty nuk ishin shkruar si\u00e7 duhet, n\u00eb momentin kur shihni list\u00ebn e tyre. P\u00ebr t\u00eb parandaluar k\u00ebt\u00eb dob\u00ebsi, mjafton t\u00eb mos e shihni list\u00ebn e rrjeteve wireless nga bsdinstall \/ bsdconfig.<\/p>\n

<\/noindex><\/p>\n

CVE-2026-39461<\/a>, CVE-2026-45254<\/a> — dob\u00ebsit\u00eb n\u00eb bibliotek\u00ebn libcasper (jo n\u00eb b\u00ebrtham\u00eb). Biblioteka \u00ebsht\u00eb menduar p\u00ebr ofrimin e sh\u00ebrbimeve n\u00eb m\u00ebnyr\u00eb t\u00eb sigurt p\u00ebr proceset e vendosura n\u00eb nj\u00eb sandbox. Nj\u00eb nga dob\u00ebsit\u00eb lidhet me kalimin jasht\u00eb kufijve t\u00eb tamponit n\u00eb grurin dhe d\u00ebmtimin e grurit p\u00ebrmes organizimit n\u00eb k\u00ebt\u00eb bibliotek\u00eb t\u00eb descriptor\u00ebve t\u00eb skedar\u00ebve me numra t\u00eb lart\u00eb (ajo ishte e llogaritur p\u00ebr numra deri n\u00eb 1024  — kufiri default i strukturave p\u00ebr thirrjen select). Dob\u00ebsia tjet\u00ebr — mund\u00ebsia p\u00ebr t\u00eb fshir\u00eb listat e kufizimeve t\u00eb vendosura (ideologjia e bibliotek\u00ebs \u00ebsht\u00eb se kufizimet e vendosura p\u00ebr nj\u00eb proces mund t\u00eb forcohen vet\u00ebm) cap_net.<\/p>\n

<\/noindex><\/p>\n

Versionet e rregulluara t\u00eb sistemit kan\u00eb numra: 14.3-RELEASE-p14, 14.4-RELEASE-p5 dhe 15.0-RELEASE-p9. Gjithashtu, merret parasysh nj\u00eb moment i r\u00ebnd\u00ebsish\u00ebm p\u00ebr disa: l\u00ebshimi i FreeBSD 13.5 sapo \u00ebsht\u00eb hequr nga mb\u00ebshtetja  — m\u00eb 30 prill 2026, dhe p\u00ebr t\u00eb (dhe p\u00ebr deg\u00ebn 13.x p\u00ebrgjith\u00ebsisht) nuk ka m\u00eb rregullime zyrtare. Megjithat\u00eb, n\u00ebse p\u00ebr nj\u00eb arsye nuk d\u00ebshironi t\u00eb shkoni menj\u00ebher\u00eb n\u00eb l\u00ebshimin 14.x, patches p\u00ebr versionin 14.3 jan\u00eb p\u00ebrgjith\u00ebsisht t\u00eb p\u00ebrshtatshme edhe p\u00ebr burimet 13.5, dhe CVE-2026-45250 p\u00ebr deg\u00ebn 13 nuk \u00ebsht\u00eb relevante p\u00ebr shkak t\u00eb munges\u00ebs n\u00eb t\u00eb t\u00eb setcred().<\/p>\n

<\/noindex><\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435. CVE-2026-45251 — use-after-free \u0432 select-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u043a\u043e\u043b\u043b\u0430\u0445, \u0435\u0441\u043b\u0438 \u0432 \u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 (\u0432 FreeBSD 15 — \u0435\u0449\u0451 \u043d\u043e\u0432\u044b\u0435 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b jail-\u043e\u0432), \u0438 \u044d\u0442\u0438 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u043f\u043e\u0442\u043e\u043a\u0435 \u043f\u043e\u043a\u0430 \u043e\u0436\u0438\u0434\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u0441\u043a\u043e\u043b\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181730","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd477 cenueshm\u00ebri t\u00eb reja n\u00eb FreeBSD | ProHoster","description":"M\u00eb 20 maj 2026, zhvilluesit e FreeBSD njoftuan korrigjimin e shtat\u00eb cenueshm\u00ebrive t\u00eb reja n\u00eb sistem. Jo t\u00eb gjitha jan\u00eb nj\u00ebsoj t\u00eb rrezikshme, por disa jan\u00eb ve\u00e7an\u00ebrisht problematike.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 FreeBSD | ProHoster","og:description":"20 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 FreeBSD \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0435\u043c\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041d\u0435 \u0432\u0441\u0435 \u043e\u043d\u0438 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e \u043e\u043f\u0430\u0441\u043d\u044b, \u043d\u043e \u0435\u0441\u0442\u044c \u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/7-novyh-uyazvimostej-v-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-25T18:48:14+00:00","article:modified_time":"2026-05-25T18:48:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/181730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=181730"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/181730\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=181730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=181730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=181730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}