Mofuta o mocha oa VLC 3.0.8 o fihla ka tharollo ea mathata a fapaneng a ts'ireletso

Matsatsi a mang a fetileng ho hlahisitsoe mofuta o mocha ho lokisa sebapala media se tsebahalang VLC 3.0.8, eo ho eona likokoanyana tse bokellaneng li hlophisitsoe le likotsi tse 13 li tsitsitse.

Eo mathata a mararo (CVE-2019-14970, CVE-2019-14777, CVE-2019-14533) e ka lebisa ho ts'ebetsong ha khoutu ea bahlaseli ha u leka ho bapala lifaele tsa multimedia e etselitsoeng mekhoa ea MKV le ASF (buffer overflow bakeng sa ho rekota le mathata a mabeli a fihlelang memori kamora ho e lokolla).

Ka lehlakoreng le leng likotsi tse 'ne ho bakhanni ba sebopeho OGG, AV1, FAAD, ASF li bakoa ke bokhoni ba ho bala data ho tsoa libakeng tsa mehopolo kantle ho sesebelisoa se abetsoeng.

Mathata a mararo a lebisa tlhokomelong ea pointer ea NULL ho li-unpack tsa dvdnav, ASF le AVI. Ho ba kotsing ho lumella palo e kholo ho phalla ho MP4 unpacker.

Mabapi le bofokoli bo sa fetoheng

Bahlahisi ba VLC ba hlokometse hore bothata bo sebopeho sa OGG se notlolla (CVE-2019-14438) e ne e bala ho tsoa sebakeng se kantle ho buffer (bala buffer overflow), empa bafuputsi ba ts'ireletso ba o fumane ts'ireletso ea ts'oaetso ea hore ho ka khonahala ho baka ho khaphatseha ha mongolo le ho hlophisa ts'ebetso ea khoutu ha o sebetsana le lifaele tsa OGG, OGM le OPUS tse nang le block block e entsoeng ka ho khetheha.

Hape ho na le ts'oaetso (CVE-2019-14533) ka sebopeho sa ASF, se u lumellang ho ngola data sebakeng sa memori se seng se lokollotsoe le ho fihlela ts'ebetso ea khoutu ka ho lekola pele kapa morao ho tatellano ea nako ha u ntse u bapala lifaele tsa WMV le WMA.

Ntle le moo, litaba tsa CVE-2019-13602 (ho phalla ka bongata) le CVE-2019-13962 (ho bala ho tsoa sebakeng se kantle ho buffer) li fuoe boemo bo kotsi ba kotsi (8.8 le 9.8), empa bahlahisi ba VLC ha baa ka ba etsa joalo ba lumela ebile ba nka hore bofokoli bona ha bo kotsi (fana ka maikutlo a ho fetola boemo ho ba 4.3).

Litokiso tse seng tsa ts'ireletso li kenyelletsa ho tlosa bohoelea ha u shebelletse livideo ka sekhahla se tlase sa foreimi, ntlafatsa ts'ehetso bakeng sa phallo e feto-fetohang (khoutu e ntlafalitsoeng ea buffering).

Ba boetse ba thusa ho rarolla mathata ka phetolelo ea WebVTT Subtitle, ho ntlafatsa tlhahiso ea molumo ho li-platform tsa macOS le iOS.

Sengoloa sa ho jarolla ho tsoa ho YouTube le sona se ntlafalitsoe, ho rarolla mathata ka ts'ebeliso ea Direct3D11 ho sebelisa matsapa a li-system ho li-driver tse nang le li-driver tsa AMD.

U ka kenya VLC Media Player 3.0.8 joang ho Linux?

Bakeng sa ba Basebelisi ba Debian, Ubuntu, Linux Mint le tse tsoang ho tsona, tlanya feela tse latelang ho terminal:

Sudo apt-get update sudo apt-get kenya vlc browser-plugin-vlc

Ha a ntse a Bao e leng basebelisi ba Arch Linux, Manjaro, Arco Linux kapa kabo efe kapa efe e tsoang ho Arch Linux, re tlameha ho thaepa:

sudo pacman -S vlc

Haeba u mosebelisi oa kabo ea KaOS Linux, taelo ea ho kenya e ts'oana le ea Arch Linux.

Hona joale bakeng sa ba basebelisi ba mofuta ofe kapa ofe oa openSUSE, ba tlameha feela ho thaepa ho terminal e latelang ho e kenya:

Sudo zypper kenya vlc

Bakeng sa bao ke basebelisi ba Fedora le eng kapa eng e tsoang ho eona, ba tlameha ho thaepa tse latelang:

Sudo dnf kenya https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$ (rpm -E% fedora) .noarch.rpm sudo dnf kenya vlc

le para Likarolo tse ling tsa Linux, re ka kenya software ena ka thuso ea liphutheloana tsa Flatpak kapa Snap. Re tlameha feela ho ba le ts'ehetso ea ho kenya ts'ebeliso ea mahlale ana.

Si re batla ho kenya ka thuso ea Snap, re tlameha feela ho thaepa taelo e latelang ho terminal:

sudo snap kenya vlc

Ho kenya mofuta oa mokhethoa oa lenaneo, e etse ka:

sudo snap kenya vlc --candidate

Kamora nako, haeba o batla ho kenya mofuta oa beta oa lenaneo o tlameha ho thaepa:

sudo snap kenya vlc -beta

Haeba o kentse ts'ebeliso ho tsoa ho Snap mme o batla ho e nchafatsa ho mofuta o mocha, o tlameha feela ho thaepa:

sudo snap khatholla vlc

Qetellong bakeng sa qBa batlang ho kenya ho tsoa Flatpak, e etse ka taelo e latelang:

flatpak kenya --user https://flathub.org/repo/appstream/org.videolan.VLC.flatpakref

Haeba ba ne ba se ba kentse mme ba batla ho nchafatsa ba tlameha ho thaepa:

flatpak - ntlafatso ea basebelisi org.videolan.VLC

Litaba tsa sengoloa sena li latela melao-motheo ea rona ea melao ea boitšoaro ea bongoli. Ho tlaleha phoso tlanya mona.

E-ba oa pele ho fana ka maikutlo

Siea maikutlo a hau

aterese ya hao ya imeile ke ke ho phatlalatswa.

*

*

  1. E ikarabella bakeng sa data: Miguel Ángel Gatón
  2. Morero oa data: Laola SPAM, tsamaiso ea maikutlo.
  3. Molao: Tumello ea hau
  4. Puisano ea data: Lintlha li ke ke tsa tsebisoa batho ba boraro ntle le ka tlamo ea molao.
  5. Polokelo ea data: Database e hapiloeng ke Occentus Networks (EU)
  6. Litokelo: Nako efe kapa efe o ka fokotsa, oa hlaphoheloa mme oa hlakola tlhaiso-leseling ea hau.

bool('nete)