{"id":113253,"date":"2024-01-30T13:41:05","date_gmt":"2024-01-30T11:41:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-realizaczii-jpeg-xl-iz-sostava-ffmpeg"},"modified":"2024-01-30T13:41:05","modified_gmt":"2024-01-30T11:41:05","slug":"uyazvimosti-v-realizaczii-jpeg-xl-iz-sostava-ffmpeg","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-realizaczii-jpeg-xl-iz-sostava-ffmpeg","title":{"rendered":"Dob\u00ebsit\u00eb n\u00eb implementimin e JPEG XL n\u00eb p\u00ebrb\u00ebrjen FFmpeg","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb zbuluar dy vulnerabilitete n\u00eb dekoduesin e formatit JPEG XL t\u00eb ofruar n\u00eb paket\u00ebn FFmpeg, t\u00eb cilat mund t\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit nga nj\u00eb shp\u00ebrthyes gjat\u00eb p\u00ebrpunimit t\u00eb imazheve t\u00eb formatuara posa\u00e7\u00ebrisht n\u00eb FFmpeg. Problemet jan\u00eb korrigjuar n\u00eb versionin FFmpeg 6.1, por p\u00ebr shkak se mb\u00ebshtetja p\u00ebr JPEG XL \u00ebsht\u00eb p\u00ebrfshir\u00eb q\u00eb nga dega 6.1, vulnerabiliteti prek vet\u00ebm sistemet q\u00eb p\u00ebrdorin nd\u00ebrtimet eksperimentale t\u00eb FFmpeg 6.1 ose q\u00eb p\u00ebrmbajn\u00eb ndryshime nga ato. <\/p>\n
Vulnerabiliteti i par\u00eb (CVE-2024-22860) shkaktohet nga nj\u00eb mbip\u00ebrshkall\u00ebzim i numrave t\u00eb plot\u00eb n\u00eb parserin e formatit JPEG XL, q\u00eb ka ndodhur p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb kontrollit t\u00eb tejkalimit t\u00eb madh\u00ebsis\u00eb s\u00eb llojit int. Vulnerabiliteti i dyt\u00eb (CVE-2024-22862) ka ndodhur si rezultat i mbip\u00ebrshkall\u00ebzimit t\u00eb numrave t\u00eb plot\u00eb n\u00eb funksionin jpegxl_anim_read_packet, i p\u00ebrdorur p\u00ebr dekodimin e animacionit, dhe lidhet me p\u00ebrdorimin e llojit t\u00eb n\u00ebnshkruar int64_t n\u00eb vend t\u00eb atij t\u00eb pa n\u00ebnshkruar uint64_t. Problemet jan\u00eb specifike p\u00ebr FFmpeg dhe nuk shfaqen n\u00eb implementimin referenc\u00eb libjxl. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"