Chrome 79.0.3945.130 inogadziridza ine yakakosha vulnerability kugadzirisa

Inowanikwa Chrome browser update 79.0.3945.130, iyo inobvisa hutsiga ina, imwe yakapihwa mamiriro edambudziko rakaoma, iro rinokutendera kuti upfuure ese mazinga ekudzivirira browser uye kuita kodhi pane system, kunze kwesandbox nharaunda. Ruzivo pamusoro pekusagadzikana kwakanyanya (CVE-2020-6378) kusvika parizvino hazvina kuburitswa, isu tinongoziva chete kuti inokonzerwa nekuwana iyo yakatosunungurwa memory block muchikamu chekuziva kutaura.

Hutatu hwasara husina njodzi hunonzi hune ngozi. Iyo CVE-2020-6379 kusagadzikana inobatanidzwawo nekuwana kune yakatosunungurwa memory block (Shandisa-mushure-yemahara) mukodhi yekutaura. CVE-2020-6380 inokonzerwa nekukanganisa mukusimbisa mameseji kubva kune ma-add-ons. Imwe shanduko ine chekuita ne Kuwedzera kudzivirira kubva vulnerabilities CVE-2020-0601 muCrypto API yeWindows papuratifomu, iyo inobvumira kusikwa kwemanyepo eTLS zvitupa uye manyepo edhijitari siginecha (yatove inowanikwa prototypes kodhi yekugadzira dummy zvitupa zvinosimbiswa seyakavimbika neWindows).

Source: opennet.ru

Voeg