VLC 3.0.11 sabunta playeran jarida tare da gyara rauni

Ƙaddamar da gyara mai kunna jarida VLC 3.0.11, wanda aka tara kurakurai da kuma kawar da su rauni (CVE-2020-13428), haifar ambaliya buffer a cikin hxxx_AnnexB_to_xVC(). Rashin lahani na iya ba da damar aiwatar da lambar maharin lokacin kunna bidiyo na musamman a cikin tsarin H.264 (Annex-B), wanda aka tattara, misali, a cikin akwati AVI. Har yanzu ba a ambaci ƙirƙira abin cin gajiyar aiki ba tukuna. Baya ga matsaloli a cikin lambar VLC, an kawar da lahani guda biyu (CVE-2020-9308, CVE-2019-19221) a cikin ɗakin karatu na libarchive da aka gina cikin wasu kayan aikin taya.

Canje-canjen da ba na tsaro ba sun haɗa da kawar da koma baya a cikin aiki tare da HLS da AAC, da kuma inganta canjin matsayi a cikin rafi don fayilolin M4A. Gina don macOS yana warware matsalolin da ke haifar da rushewar sake kunnawa, rushewa lokacin samun damar fayafai na Bluray da aka ɗora, da faɗuwa a farawa. Kafaffen ƙayyadaddun kwari na Android a cikin canjin ƙimar samfurin.

source: budenet.ru

Add a comment