Chiwopsezo cha VLC media player

Mu VLC media player kudziwika kusatetezeka (CVE-2019-13615), zomwe zitha kupangitsa kuti aziwombera akamasewera vidiyo yopangidwa mwapadera ya MKV (kugwiritsa ntchito prototype). Vuto limayamba chifukwa chofikira kukumbukira kunja kwa buffer yomwe idaperekedwa mu MKV media chidebe chotsitsa ndikutuluka ndikutulutsa komweku 3.0.7.1.

Kuwongolera pakadali pano sakupezeka, komanso zosintha za phukusi (Debian, Ubuntu, RHEL, Fedora, SUSE, FreeBSD). Zofooka kupatsidwa Mulingo wowopsa wangozi (9.8 mwa 10 CVSS). Nthawi yomweyo, opanga VLC khulupiriranikuti vutoli limangokhala ndi kutayikira kwa kukumbukira ndipo silingagwiritsidwe ntchito kuyambitsa ma code kapena kuyambitsa kuwonongeka.

Source: opennet.ru