Kusintha kwa VLC 3.0.11 media player ndi kukonza chiopsezo

Yovomerezedwa ndi kukonza media player kumasulidwa VLC 3.0.11, mmene anasonkhanitsa zolakwa ndi kuthetsedwa kusatetezeka (CVE-2020-13428), chifukwa kusefukira buffer mu hxxx_AnnexB_to_xVC() ntchito. Kusatetezeka kumapangitsa kuti code yowukirayo iwonongeke posewera kanema wopangidwa mwapadera mumtundu wa H.264 (Annex-B), wopakidwa, mwachitsanzo, mu chidebe cha AVI. Palibe kutchulidwa kopanga mwayi wogwira ntchito pano. Kuphatikiza pamavuto mu code ya VLC, zofooka ziwiri zachotsedwa (CVE-2020-9308, CVE-2019-19221) mu library ya libarchive yomangidwa mu zida zina zoyambira.

Kusintha kopanda chitetezo kumaphatikizapo kuchotsa zobwerera m'mbuyo pogwira ntchito ndi HLS ndi AAC, komanso kukonza kusintha kwa malo mumtsinje wa mafayilo a M4A. Kumangirira kwa macOS kuthetsa mavuto omwe amachititsa kuti kuseweredwa kwamawu kusokonezedwe, kuwonongeka mukamalowa mu Bluray discs, ndikuwonongeka poyambitsa. Konzani zolakwika za Android muchitsanzo chakusintha ma code.

Source: opennet.ru

Kuwonjezera ndemanga