Ezinsukwini ezimbalwa ezedlule, kukhishwe inguqulo entsha yokulungisa yesidlali semidiya esidumile se-VLC 3.0.8 , lapho kwalungiswa khona amaphutha aqongelelekile kwalungiswa nobuthakathaka obungu-13.
Phakathi kwalezi, izinkinga ezintathu (i-CVE-2019-14970, i-CVE-2019-14777, i-CVE-2019-14533) zingaholela ekusetshenzisweni kwekhodi yomhlaseli lapho ezama ukudlala amafayela e-multimedia aklanywe ngokukhethekile kumafomethi e-MKV ne-ASF (ukugcwala kwe-buffer kokuqopha kanye nezinkinga ezimbili zokufinyelela imemori ngemva kokuyikhipha).
Ngakolunye uhlangothi, ubuthakathaka obune kubalawuli befomethi ye -OGG, AV1, FAAD, kanye ne-ASF bubangelwa ikhono lokufunda idatha ezindaweni zememori ezingaphandle kwe-buffer eyabelwe.
Izinkinga ezintathu ziholela ekuchazweni kwesikhombi se-NULL ku-dvdnav, ASF ne-AVI format unpacks. Ukuba sengozini kuvumela ukuchichima kwenani ku-MP4 unpacker.
Mayelana nokuba sengozini okungaguquki
Abathuthukisi be-VLC baphawule ukuthi inkinga ku-OGG format unpacker (CVE-2019-14438) yayihilela ukufunda endaweni engaphandle kwe-buffer (funda i-buffer overflow), kodwa abacwaningi bezokuphepha abathole ubuthakathaka bathi kungenzeka ukuthi kubangele ukugcwala kokubhala futhi kuhlele ukwenziwa kwekhodi ngokucubungula amafayela e-OGG, OGM, kanye ne-OPUS nge-header block eyenziwe ngokukhethekile.
Kukhona futhi ubungozi (CVE-2019-14533) ku-ASF format unpacker, ekuvumela ukuthi ubhale idatha endaweni yememori esivele ikhululiwe futhi ufeze ukusebenza kwekhodi ngokwenza ukuskena okuya phambili noma okuya emuva kumugqa wesikhathi ngesikhathi sokudlala amafayela e-WMV ne-WMA.
Futhi, ukukhishwa kwe-CVE-2019-13602 (ukuchichima okuphelele) kanye ne-CVE-2019-13962 (kufundwa kusuka endaweni engaphandle kwe-buffer) kunikezwe izinga eliyingozi kakhulu (8.8 no-9.8), kepha abathuthukisi be-VLC abavumelananga ukuthi lokhu kuba sengozini akuyona ingozi (siphakamisa ukushintsha ileveli ibe ngu-4.3).
Ukulungiswa okungeyona eyokuphepha kuhlanganisa ukuqeda ukungingiza lapho ubuka amavidiyo anezinga eliphansi lozimele, kanye nokuthuthukisa ukwesekwa kokusakaza okuguquguqukayo (ikhodi yokubhafa ethuthukisiwe).
Zisiza futhi ukuxazulula izinkinga ngokunikezela ngesihlokwana seWebVTT, ukuthuthukisa okukhipha umsindo kuma-macOS naku-iOS platforms.
Iskripthi sokulanda kusuka ku-YouTube sibuye sabuyekezwa, saxazulula izinkinga ngokusetshenziswa kwe-Direct3D11 ukusebenzisa ukusheshiswa kwehadiwe kumasistimu nabashayeli abathile be-AMD.
Ungayifaka kanjani i-VLC Media Player 3.0.8 ku-Linux?
Kubasebenzisi be-Debian, Ubuntu, Linux Mint kanye nama-derivatives, mane uthayiphe okulandelayo ku-terminal:
Sudo apt-get update sudo apt-get ukufaka i-vlc browser-plugin-vlc
Kulabo abangabasebenzisi be-Arch Linux, Manjaro, Arco Linux noma yikuphi ukusatshalaliswa okususelwa ku-Arch Linux, kumele sithayiphe:
sudo pacman -S vlc
Uma ungumsebenzisi wokusatshalaliswa kwe-KaOS Linux, umyalo wokufaka uyefana ne-Arch Linux.
Manje, kulabo abangabasebenzisi banoma yiluphi uhlobo lwe-openSUSE, udinga kuphela ukuthayipha okulandelayo ku-terminal ukuze ufake:
I-sudo zypper ifaka i-vlc
Kulabo abangabasebenzisi beFedora nanoma yikuphi okuphuma kukho, kufanele uthayiphe okulandelayo:
Sudo dnf ukufaka https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$ (rpm -E% fedora) .noarch.rpm sudo dnf install vlc
Kwezinye izinsiza ze-Linux, singafaka le software sisebenzisa amaphakheji e-Flatpak noma e-Snap. Sidinga nje ukwesekwa kokufaka izinhlelo zokusebenza sisebenzisa lobu buchwepheshe.
Uma ufuna ukufaka usebenzisa i-Snap, vele uthayiphe umyalo olandelayo ku-terminal:
sudo snap ufake i-vlc
Ukufaka inguqulo yomqokelwa uhlelo, yenze no:
I-sudo snap ukufaka i-vlc --candidate
Ekugcineni, uma ufuna ukufaka inguqulo ye-beta yohlelo kufanele uthayiphe:
I-sudo snap ukufaka i-vlc --beta
Uma ufake uhlelo kusuka ku-Snap futhi ufuna ukubuyekezela enguqulweni entsha, kufanele uthayiphe nje:
I-sudo snap ivuselele i-vlc
Ekugcineni, kulabo abafuna ukufaka kusuka ku-Flatpak, benza kanjalo ngomyalo olandelayo:
flatpak ukufaka --user https://flathub.org/repo/appstream/org.videolan.VLC.flatpakref
Futhi uma ngabe bebevele befakiwe futhi bafuna ukuvuselela kufanele bathayiphe:
flatpak --usus buyekeza org.videolan.VLC