Bayan 'yan sa'o'i da suka gabata a matsalar tsaro a cikin VLC wanda aka yiwa alama tare da 9.8 cikin 10 a kan sikelin haɗari. CERT-Bund ne ya gano "muguwar gazawa" kuma aka buga shi WinFuture (a Jamusanci), inda suke bayyana yanayin rauni wanda ke ba da izinin aiwatar da lambar nesa, wanda zai iya ba da damar mai amfani da mugun nesa ya girka, gyara ko aiwatar da lambar ba tare da mun lura ba ko ma samun damar fayiloli a kan tsarinmu. An kuma yada ta Mita.
Siffofin da abin ya shafa sune na Linux, Windows da Unix, macOS tana da aminci, duk a cewar WinFuture da sauran hanyoyin da suka yada wannan bayanin. Labari mai dadi shine babu wanda yayi amfani da raunin, wanda, tare da sigar VideoLan, ya bar mu da mamaki shin duk wannan gaskiya ne ko ƙaryar ƙararrawa. Amma gaskiyar ita ce sigar VideoLan, ko sigar ɓangare na uku da suka ce sun ƙirƙiri kashi 60%, ya bar mana ƙarin shakku game da abin da ke faruwa.
Ba kwaro na VLC ba
Shin kun ma duba wannan?
Babu wanda zai iya sake haifar da wannan batun a nan.- VideoLAN (@vidiyolan) Yuli 23, 2019
Shin kun ma duba wannan? Babu wanda zai iya haifar da wannan batun anan »
A lokacin wannan rubutun, VideoLan yana da matukar damuwa game da abin da CVE da Miter suka yi. Na farko suna gunaguni cewa ba su tuntube su kwata-kwata tsawon shekaru kuma a yanzu suna buga wannan hukuncin ba tare da gaya musu komai ba. Sannan suna cewa ba matsalar VLC ba, amma daga wani laburare na uku mai alaƙa da fayilolin MKV, wanda aka gyara tsawon watanni:
Game da "batun tsaro" akan #VLC : VLC ba mai rauni bane.
tl; dr: batun yana cikin ɗakin karatu na ɓangare na 3, wanda ake kira libebml, wanda aka gyara fiye da watanni 16 da suka gabata.
VLC tunda sigar 3.0.3 tana da madaidaiciyar siga, kuma @Rariyajarida bai ma bincika iƙirarin su ba.thread:
- VideoLAN (@vidiyolan) Yuli 24, 2019
"Game da 'matsalar aibu' a cikin # VLC": VLC ba ta da rauni. tl; dr: kwaron yana cikin wani ɗakin karatu na ɓangare na uku, wanda ake kira libebml, wanda aka gyara shi sama da watanni 16 da suka gabata. VLC ta ba da ingantacciyar siga tun daga 3.0.3, kuma Miter bai ma bincika abin da ya buga ba »
Wani kwaro mai wahalar amfani
Kamfanin da ya haɓaka ɗayan mashahuran playersan wasa a duniya shima yana da wani ƙara: ta yaya hakan zai yiwu laulayin da ba za a iya amfani da shi ba ya sami nasara 9.8 cikin 10 a kan sikelin haɗari? Sun kuma ce, a cikin mafi munin yanayi, ba shi yiwuwa a saci bayanai daga kwamfutar ko aiwatar da lambar daga nesa, mafi munin abu shi ne haifar da "hadari" a cikin tsarin aiki.
An yi amfani da VideoLan faci wannan yana magance a Idan suka kasa cewa yanzu babu shi akan dan wasan ka. Sun tabbatar da cewa an gyara shi tun VLC v3.0.3, amma onlyan mintuna kaɗan da suka gabata sun sanya alamar a matsayin "rufaffiyar". Gaskiyar ita ce, 3.0.3 ya bayyana azaman sigar da abin ya shafa. Kamar dai hakan bai isa ba, NIST ta gyaru shigarwa game da wannan yanayin rauni yana cewa «An sake canza wannan yanayin yanayin tun lokacin da NVD yayi nazarin sa na ƙarshe. Kuna jiran sabon bincike wanda zai iya haifar da sabon canje-canje a cikin bayanin da aka bayar", wanda ke nufin cewa nazarin farko ba daidai bane.
Wasu sun ce yana da haɗari sosai amfani da VLC, har ma an ba da shawarar cire shi, wasu kuma sun ce dole ne ku bincika abin da aka buga kuma kwaron ba ya wanzu, wasu suna gyara ainihin labarinsu ... Abin sani kawai abin tabbatacce shine ban cire VLC ba.
